Softing edgeConnector Siemens Cleartext Transmission of Credentials Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web console, which listens on TCP port 8099 by default. HTTP...

Softing edgeConnector Siemens Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeConnector Siemens. Authentication is required to exploit this vulnerability. In the case of a network-adjacent attacker, the existing authentication mechanism can be bypassed. The specifi...

The vulnerability of the data integration tool Softing edgeAggregator and the software modules for connecting controllers such as Softing edgeConnector Modbus, Softing edgeConnector 840D, Softing edgeConnector Fanuc CNC, and Softing edgeConnector Siemens lies in the transmission of accounting data in an unencrypted form. This allows unauthorized individuals to gain unauthorized access to protected information.

The vulnerability of the data integration tool Softing edgeAggregator and the software modules for connecting controllers such as Softing edgeConnector Modbus, Softing edgeConnector 840D, Softing edgeConnector Fanuc CNC, and Softing edgeConnector Siemens lies in the transmission of credentials in...

CVE-2024-0860 Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator

The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets to craft their own requests...

CVE-2024-0860 Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator

The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets to craft their own requests...

Softing edgeConnector

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION : Low attack complexity Vendor : Softing Equipment : edgeConnector Vulnerabilities : Cleartext Transmission of Sensitive Information, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities could create conditions...

Softing edgeConnector and Softing edgeAggregator Security Vulnerabilities

Softing edgeAggregator and Softing edgeConnector are both products of Softing. softing edgeAggregator is a flexible and container-based solution for managing complex system architectures for OT/IT integration into edge and cloud applications. softing edgeConnector is a Docker-based software...

PT-2024-2277

Name of the Vulnerable Software and Affected Versions Softing edgeAggregator and Softing edgeConnector modules affected versions not specified Softing edgeConnector Modbus affected versions not specified Softing edgeConnector 840D affected versions not specified Softing edgeConnector Fanuc CNC...

CVE-2023-37571

Softing TH SCOPE through 3.70 allows XSS...

CVE-2023-37571

Softing TH SCOPE through 3.70 allows XSS...

Cross site scripting

Softing TH SCOPE through 3.70 allows XSS...

Softing TH SCOPE Security Vulnerability

Softing TH SCOPE is a software application for industrial network management and network diagnostics from Softing Germany. A security vulnerability exists in Softing TH SCOPE version 3.70 and earlier versions. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...

CVE-2023-37571

Softing TH SCOPE through 3.70 allows XSS...

CVE-2023-37571: Improper Neutralization of Input During Web Page Generation

Softing TH SCOPE through 3.70 allows XSS...

PT-2024-12639

Name of the Vulnerable Software and Affected Versions Softing TH SCOPE versions prior to 3.71 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take...

CVE-2023-37571

CVE-2023-37571 concerns a XSS vulnerability in Softing TH SCOPE (through version 3.70). The vulnerability allows an attacker to inject or execute script within the context of the affected application, with the CVSS v3.1 score of 6.1 (MEDIUM). Attack vector is NETWORK, but exploitation requires us...

CVE-2023-37571

Softing TH SCOPE through 3.70 allows XSS...

CVE-2023-38126

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific fl...

CVE-2023-38126

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific fl...

Remote code execution

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific fl...