Skip to content
OpenAdvisories
High ICSA-24-074-13 2 CVEs

Softing edgeConnector

Published Mar 14, 2024 · Updated Mar 14, 2024

Vendor: Softing Product: edgeAggregator Product: edgeConnector

Summary

Successful exploitation of these vulnerabilities could create conditions that may allow remote code execution.

Vulnerabilities 2

  • High 8.0
    CVE-2024-0860

    Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator

    The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets to craft their own requests.

    Softing edgeAggregator edgeConnector
  • High 7.2
    CVE-2023-38126 EPSS 71%

    Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability

    Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to explo…

    Softing edgeAggregator

Revision history

  1. #1

    Initial Publication

References