ZDI-23-1061: (0Day) (Pwn2Own) Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability
This vulnerability allows remote attackers to create directories on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1061?
ZDI-23-1061 has a high severity rating due to its ability to allow remote attackers to create directories on vulnerable installations.
How do I fix ZDI-23-1061?
To mitigate ZDI-23-1061, ensure that your installation of Softing Secure Integration Server is updated to the latest security patch that addresses this vulnerability.
Which software is affected by ZDI-23-1061?
ZDI-23-1061 affects the Softing Secure Integration Server.
Can ZDI-23-1061 be exploited without authentication?
Although ZDI-23-1061 requires authentication, the vulnerability allows the existing authentication mechanism to be bypassed.
What are the consequences of exploiting ZDI-23-1061?
Exploiting ZDI-23-1061 could lead to unauthorized directory creation, potentially compromising the integrity and security of the affected installation.