CVE-2022-37453: Softing Edgeaggregator

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types.

Affected products

• Softing Edgeaggregator: up to and including 3.50
• Softing Edgeconnector: up to and including 3.50
• Softing Opc: up to and including 5.22
• Softing Opc Ua C++ Software Development Kit: up to and including 6.00
• Softing Secure Integration Server: up to and including 1.22
• Softing Uagates: up to and including 1.74

Published 2022-10-20. Last modified 2026-06-17.