IcscertVULNRICHMENT:CVE-2024-0860CVE-2024-0860 Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets to craft their own requests.
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:softing:edgeconnector:3.60:*:*:*:*:*:*:*"
],
"vendor": "softing",
"product": "edgeconnector",
"versions": [
{
"status": "affected",
"version": "3.60"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:a:softing:edgeaggregator:3.60:*:*:*:*:*:*:*"
],
"vendor": "softing",
"product": "edgeaggregator",
"versions": [
{
"status": "affected",
"version": "3.60"
}
],
"defaultStatus": "unaffected"
}
]Related
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
total