Soft8Soft LLC — Vulnerabilities & Security Advisories 7

Soft8Soft LLC develops 3D modeling and visualization software, primarily serving the architecture and engineering industries with their 3D-Tool product line. Historically, their vulnerabilities have frequently included remote code execution flaws, cross-site scripting issues, and privilege escalation weaknesses, often stemming from improper input validation and insecure deserialization. The company has addressed multiple critical security flaws in their ActiveX controls and web interfaces, with seven CVEs documenting these issues. While no major public security incidents have been widely reported, their products' integration with web browsers and enterprise systems has made them targets for exploitation, necessitating regular security updates and careful deployment configurations.