Executive brief
Softing's OPC UA C++ SDK and Secure Integration Server contain a path traversal vulnerability that allows attackers to bypass security restrictions on file and directory assignments. By manipulating FileType object renames, an attacker can access or modify files and directories outside their intended scope, potentially compromising data integrity and availability in industrial automation systems that rely on these components.
Technical details
The vulnerability exists in how FileDirectory and File OPC UA objects handle path assignments. Specifically, the FileType rename functionality fails to properly validate and enforce restrictions on directory and file paths, allowing an attacker to bypass intended limitations. This is a path traversal / improper input validation issue affecting OPC UA implementations. The attack requires network access to the OPC UA server and does not require prior authentication based on typical OPC UA threat models. A successful exploit enables unauthorized file system access, potentially allowing data exposure or modification of system files.
Affected products
- Softing OPC UA C++ SDK through 6.20
- Softing Secure Integration Server through 1.22
Timeline
- 2023: disclosed: CVE-2023-29377 assigned
- 2026-09-14: other: NVD entry published