A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Edgeaggregator | Softing | 3.1 (including) | 3.1 (including) |
| Edgeconnector | Softing | 3.1 (including) | 3.1 (including) |
| Opc | Softing | 5.2 (including) | 5.2 (including) |
| Opc_ua_c++_software_development_kit | Softing | 6 (including) | 6 (including) |
| Secure_integration_server | Softing | 1.22 (including) | 1.22 (including) |
| Uagates | Softing | 1.74 (including) | 1.74 (including) |