Softing edgeConnector
view advisory published 2024-03-14
Successful exploitation of these vulnerabilities could create conditions that may allow remote code execution.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-0860US | high7.5OT elevated | — | ||
The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets to craft their own requests.… | ||||
| CVE-2023-38126US | high7.2 | — | ||
Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-074-13 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-074-13 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (4)
- FixededgeAggregator
Update Softing edgeConnector and edgeAggregator to v3.70 or greater.
- FixededgeAggregator
Update Softing edgeConnector and edgeAggregator to v3.70 or greater.
- FixededgeConnector
Update Softing edgeConnector and edgeAggregator to v3.70 or greater.
- FixededgeConnector
Update Softing edgeConnector and edgeAggregator to v3.70 or greater.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan