Lucene search
Claroty Research - Team82 - Uri Katz, Noam Moshe, Vera Mens, Sharon BrizinovZDI-23-1058HistoryAug 09, 2023 - 12:00 a.m.
(0Day) (Pwn2Own) Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability
2023-08-0900:00:00
Claroty Research - Team82 - Uri Katz, Noam Moshe, Vera Mens, Sharon Brizinov
www.zerodayinitiative.com
9
softing edgeaggregator
remote code execution
authentication required
backup zip files
file operations
root context
0.031 Low
EPSS
Percentile
91.1%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of backup zip files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this to execute code in the context of root.
Related
cve
cve
CVE-2023-38126
2023-12-19 22:15:07
nvd
nvd
CVE-2023-38126
2023-12-19 22:15:07
cvelist
cvelist
prion
prion
Remote code execution
2023-12-19 22:15:00
zdi
zdi
ics
ics
Softing edgeConnector
2024-03-14 12:00:00