Description (CNA)
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the `admin` password. There is no warning or prompt to ask the user to change the default password, and to change the password, many steps are required.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Softing / Secure Integration Server | affected V1.22 |
| Softing / edgeConnector Siemens | affected V3.10 |
| Softing / edgeConnector 840D | affected V3.10 |
| Softing / edgeConnector Modbus | affected V3.10 |
| Softing / edgeAggregator | affected V3.10 |
CWE
CWE-287
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04
- https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-6.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.