Softing edgeConnector

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION : Low attack complexity Vendor : Softing Equipment : edgeConnector Vulnerabilities : Cleartext Transmission of Sensitive Information, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities could create conditions...

CVE-2023-38126

creationtimestamp| type| source ---|---|--- 2023-12-20 13:53:12+00:00| seen| https://t.me/ctinow/156981...

CVE-2023-38126 Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific fl...

CVE-2023-38126

Softing CVE-2023-38126 is a directory traversal leading to remote code execution in Softing edgeAggregator and edgeConnector. The vulnerability stems from insufficient validation of a user-supplied path when processing backup zip files, allowing an attacker with network access and admin privilege...