CVE-2022-2336 | BDVDB-2026-182549 Detail

Description#

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the `admin` password. There is no warning or prompt to ask the user to change the default password, and to change the password, many steps are required.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-08-17Record published in the CVE List.
2. Version 22025-04-16Most recent update recorded in the CVE List.