ZDI-CAN-20550: ZDI-23-1055: (Pwn2Own) Softing Secure Integration Server Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-20550?
The severity of ZDI-CAN-20550 is considered high due to the potential for remote code execution by attackers.
How do I fix ZDI-CAN-20550?
To fix ZDI-CAN-20550, ensure that your Softing Secure Integration Server is updated to the latest version that contains security patches addressing this vulnerability.
Who is affected by ZDI-CAN-20550?
Organizations using affected installations of Softing Secure Integration Server are at risk from the ZDI-CAN-20550 vulnerability.
What type of vulnerability is ZDI-CAN-20550?
ZDI-CAN-20550 is classified as a remote code execution vulnerability that can be exploited through authentication bypass.
Can ZDI-CAN-20550 be exploited without authentication?
No, ZDI-CAN-20550 requires authentication, but the vulnerability allows for the existing authentication mechanism to be bypassed.