exploit/windows/http/softing_sis_rce

weaponized

Softing Secure Integration Server v1.22 Remote Code Execution

view exploit source metasploittype exploitpublished 2022-07-27catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-2334US	high7.2OT elevated	12.3% (96th)	Exploit	2022-08-17
The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targ…
CVE-2022-1373US	high7.2	12.8% (96th)	Exploit	2022-08-17
The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.