What is GHSA-hwrv-x7wv-x58q?

GHSA-hwrv-x7wv-x58q is a security advisory published by GitHub Security Advisories with Medium severity. An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration...

Which CVE IDs does GHSA-hwrv-x7wv-x58q cover?

GHSA-hwrv-x7wv-x58q covers the following CVE IDs: CVE-2023-29377. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hwrv-x7wv-x58q?

GHSA-hwrv-x7wv-x58q has a CVSS v3 base score of 6.6, published by GitHub Security Advisories.

GHSA-hwrv-x7wv-x58qMediumCVSS 6.6

An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration...

Vendor

GitHub Security Advisories

Published

September 14, 2026

Last Modified

September 14, 2026

🔗 CVE IDs covered (1)

CVE-2023-29377 →

📋 Description

An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to FileDirectory OPC UA objects and a file path to File OPC UA objects.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2023-29377
https://industrial.softing.com/fileadmin/psirt/downloads/syt-2023-02.html
https://industrial.softing.com/fileadmin/psirt/downloads/syt-2023-02.json
https://www.zerodayinitiative.com/advisories/ZDI-23-1055
https://github.com/advisories/GHSA-hwrv-x7wv-x58q