CVE-2023-39482

Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within libopcuaclient.so. The issue results from hardcoding crytographic keys within the product. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-20610.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.zerodayinitiative.com/advisories/ZDI-23-1064/	Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-1064/	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:softing:edgeaggregator::::::::
	cpe:2.3:a:softing:edgeconnector::::::::
	cpe:2.3:a:softing:secure_integration_server::::::::

History

12 Aug 2025, 14:44

Type	Values Removed	Values Added
References	~~() https://www.zerodayinitiative.com/advisories/ZDI-23-1064/ -~~	() https://www.zerodayinitiative.com/advisories/ZDI-23-1064/ - Third Party Advisory
First Time		Softing edgeaggregator Softing edgeconnector Softing secure Integration Server Softing
CPE		cpe:2.3:a:softing:edgeconnector:::::::: cpe:2.3:a:softing:secure_integration_server:::::::: cpe:2.3:a:softing:edgeaggregator::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~4.9~~	v2 : unknown v3 : 6.5
CWE		CWE-798

Information

Published : 2024-05-03 03:15

Updated : 2025-08-12 14:44

NVD link : CVE-2023-39482

Mitre link : CVE-2023-39482

CVE.ORG link : CVE-2023-39482

JSON object : View

Products Affected

softing

edgeconnector
secure_integration_server
edgeaggregator

CWE

CWE-321

Use of Hard-coded Cryptographic Key

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2023-39482", "cveTags": [], "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "zdi-disclosures@trendmicro.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.2}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2024-05-03T03:15:14.793", "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1064/", "tags": ["Third Party Advisory"], "source": "zdi-disclosures@trendmicro.com"}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1064/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "zdi-disclosures@trendmicro.com", "description": [{"lang": "en", "value": "CWE-321"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.\n\nThe specific flaw exists within libopcuaclient.so. The issue results from hardcoding crytographic keys within the product. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-20610."}, {"lang": "es", "value": "Vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n de clave criptogr\u00e1fica codificada en el servidor de integraci\u00f3n seguro de Softing. Esta vulnerabilidad permite a atacantes remotos revelar informaci\u00f3n confidencial sobre las instalaciones afectadas de Softing Secure Integration Server. Aunque se requiere autenticaci\u00f3n para aprovechar esta vulnerabilidad, se puede omitir el mecanismo de autenticaci\u00f3n existente. La falla espec\u00edfica existe dentro de libopcuaclient.so. El problema se debe a la codificaci\u00f3n de claves criptogr\u00e1ficas dentro del producto. Un atacante puede aprovechar esta vulnerabilidad para revelar las credenciales almacenadas, lo que provocar\u00eda un mayor commit. Era ZDI-CAN-20610."}], "lastModified": "2025-08-12T14:44:04.517", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:softing:edgeaggregator:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5ED10461-171A-4AC4-A26E-43EA002D6716", "versionEndExcluding": "3.70"}, {"criteria": "cpe:2.3:a:softing:edgeconnector:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3896509-18EA-4FCA-B96E-FC2053898665", "versionEndExcluding": "3.70"}, {"criteria": "cpe:2.3:a:softing:secure_integration_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6088DDC3-8E06-4782-8069-E3ABF8094A3D", "versionEndExcluding": "1.30"}], "operator": "OR"}]}], "sourceIdentifier": "zdi-disclosures@trendmicro.com"}