Client Certificate Trust Bypass Vulnerability in OPC HTTPS Server by Softing
CVE-2025-7390

9.1CRITICAL

Key Information:

Vendor

Softing

Status
Opc Ua C++ Sdk
Edgeconnector
Edgeaggregator
Vendor
CVE Published:
21 August 2025

What is CVE-2025-7390?

A vulnerability exists that enables a malicious client to circumvent the client certificate trust check on an OPC HTTPS server. This occurs when the server's configuration permits only secure communication, potentially allowing unauthorized access to sensitive resources and information.

Affected Version(s)

edgeAggregator Linux 0 <= 2025.03

edgeAggregator Linux 0 <= 2025.03

edgeConnector Linux 0 <= 2025.03

References

https://industrial.softing.com/fileadmin/psirt/downloads/...
https://industrial.softing.com/fileadmin/psirt/downloads/...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.