Skip to main content

Edgeaggregator CVE-2023-38126

HIGH
Path Traversal (CWE-22)
2023-12-19 zdi-disclosures@trendmicro.com
7.2
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.2 HIGH
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 19, 2023 - 22:15 nvd
HIGH 7.2

DescriptionNVD

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability.

The specific flaw exists within the processing of backup zip files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this to execute code in the context of root. Was ZDI-CAN-20543.

AnalysisAI

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Path Traversal (CWE-22), which allows attackers to access files and directories outside the intended path. Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of backup zip files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this to execute code in the context of root. Was ZDI-CAN-20543. Affected products include: Softing Edgeaggregator.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate and canonicalize file paths. Use chroot or sandboxing. Reject input containing path separators or '../' sequences.

CVE-2022-2334 HIGH POC
7.2 Aug 17

The application searches for a library dll that is not found. Rated high severity (CVSS 7.2), this vulnerability is remo

CVE-2022-1373 HIGH POC
7.2 Aug 17

The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vu

CVE-2022-2336 CRITICAL
9.8 Aug 17

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator crede

CVE-2024-0860 HIGH
7.5 Mar 14

The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow a

CVE-2022-37453 HIGH
7.5 Oct 20

An issue was discovered in Softing OPC UA C++ SDK before 6.10. Rated high severity (CVSS 7.5), this vulnerability is rem

CVE-2022-2547 HIGH
7.5 Aug 17

A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integrati

CVE-2022-2337 HIGH
7.5 Aug 17

A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Ser

CVE-2022-2335 HIGH
7.5 Aug 17

A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integra

CVE-2022-1748 HIGH
7.5 Aug 17

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affec

CVE-2022-1069 HIGH
7.5 Aug 17

A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Inte

CVE-2022-2338 MEDIUM
5.3 Aug 17

Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack. Rated

Share

CVE-2023-38126 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy