PT-2022-15947
CVE-2022-2335
·
Published
2022-08-17
·
Updated
2022-08-23
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Softing Secure Integration Server version V1.22
Description
A denial-of-service condition can be created in the software by sending a crafted HTTP packet with a -1 content-length header. This issue affects the Softing Secure Integration Server, allowing an attacker to potentially disrupt service.
Recommendations
For Softing Secure Integration Server version V1.22, consider restricting access to the HTTP endpoint to minimize the risk of exploitation until a patch is available. As a temporary workaround, disabling the handling of HTTP packets with negative content-length headers may help mitigate the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾