PT-2023-15612 · Softing · Smartlink Sw-Ht

Anthony Goyette · Published 2023-11-06 · Updated 2024-10-28 · CVE-2022-48193

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Softing smartLink SW-HT versions prior to 1.30

Description The issue concerns the use of weak ciphers during secure communication via SSL in the affected software. This could potentially compromise the security of the communication.

Recommendations For versions prior to 1.30, update to version 1.30 or later to resolve the issue. As a temporary workaround, consider disabling the use of weak ciphers in SSL communication until a patch is available. Restrict access to sensitive data transmitted over SSL to minimize the risk of exploitation.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2022-48193

Affected Products

Smartlink Sw-Ht

References · 6

• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-11.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48193 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48193 · Security Note
• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-11.json · Vendor Advisory
• https://t.me/cvenotify/99789 · Telegram Post
• https://t.me/cibsecurity/73636 · Telegram Post