CVE-2022-1373: Softing Edgeaggregator

High severity, CVSS 7.2. EPSS: 12.8% chance of exploitation in the next 30 days.

The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration" feature to upload a zip file containing a path traversal file may cause a file to be created and executed upon touching the disk.

Affected products

• Softing Edgeaggregator: version 3.1 only
• Softing Edgeconnector: version 3.1 only
• Softing Opc: version 5.2 only
• Softing Opc Ua C++ Software Development Kit: version 6 only
• Softing Secure Integration Server: version 1.22 only
• Softing Uagates: version 1.74 only

Published 2022-08-17. Last modified 2026-06-17.