PT-2022-15947

CVE-2022-2335

·

Published

2022-08-17

·

Updated

2022-08-23

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Softing Secure Integration Server version V1.22
Description A denial-of-service condition can be created in the software by sending a crafted HTTP packet with a -1 content-length header. This issue affects the Softing Secure Integration Server, allowing an attacker to potentially disrupt service.
Recommendations For Softing Secure Integration Server version V1.22, consider restricting access to the HTTP endpoint to minimize the risk of exploitation until a patch is available. As a temporary workaround, disabling the handling of HTTP packets with negative content-length headers may help mitigate the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ZDI-22-1160
Found an issue in the description? Have something to add? Feel free to write us 👾