Description
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the `admin` password. There is no warning or prompt to ask the user to change the default password, and to change the password, many steps are required.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Softing | Secure Integration Server | V1.22 | — |
| Softing | edgeConnector Siemens | V3.10 | — |
| Softing | edgeConnector 840D | V3.10 | — |
| Softing | edgeConnector Modbus | V3.10 | — |
| Softing | edgeAggregator | V3.10 | — |
Advisories 1
- ICSA-22-228-04 Softing Secure Integration Server CISA ICS & IT advisories · Aug 16, 2022