| |
Vulnerability CVE-2022-2336
Published: 2022-08-17
| Description: |
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the `admin` password. There is no warning or prompt to ask the user to change the default password, and to change the password, many steps are required. |
Type:
CWE-287 (Improper Authentication)
References: |
https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04
https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-6.html
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
