Softing

Softing develops industrial integration and OPC (OLE for Process Control) middleware, including secure data-exchange servers, edge aggregators, and protocol-translation software that bridge operational-technology environments with enterprise networks. Although the vendor's product portfolio is focused, its exposure is amplified by the critical role these components play in manufacturing, utilities, and industrial-control architectures where patching cycles are long and connectivity demands are rising. Vulnerabilities recur across the OPC and edge-connector product lines through weakness classes including NULL-pointer dereferences, cross-site scripting in web-facing management interfaces, uncontrolled resource consumption, type-confusion flaws, and cleartext transmission of sensitive data—patterns characteristic of middleware that must translate between legacy industrial protocols and modern networked systems. The recurring weakness classes reflect both parser complexity and the historical assumption in OT environments that network isolation would serve as a primary defense. Current severity, exploitation activity, and exposure counts are shown alongside this summary.