A vulnerability was found in Softing Secure Integration Server 1.22. It has been declared as critical. Affected by this vulnerability is an unknown code of the component Restore Configuration Handler. The manipulation with an unknown input leads to a path traversal vulnerability. The CWE definition for the vulnerability is CWE-23. The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration" feature to upload a zip file containing a path traversal file may cause a file to be created and executed upon touching the disk.

The weakness was published 08/18/2022 as icsa-22-228-04. The advisory is shared at cisa.gov. This vulnerability is known as CVE-2022-1373 since 04/14/2022. Technical details are unknown but a public exploit is available. MITRE ATT&CK project uses the attack technique T1006 for this issue.

It is possible to download the exploit at packetstormsecurity.com. It is declared as highly functional.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Softing

Name

• Secure Integration Server

Version

• 1.22

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion