PatchTheCVEedgeaggregator vulnerabilities and fixes
Recent CVEs affecting edgeaggregator, with upgrade or downgrade steps. 7 tracked.
edgeaggregator has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-05-03. Highest priority: CVE-2023-27335 (score 52/100).
- CVE-2024-0860 HIGH 8.0 DOWNGRADE DOWNGRADE The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which
- CVE-2023-39482 MEDIUM 6.5 UPGRADE UPGRADE Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability
- CVE-2023-38126 HIGH 7.2 DOWNGRADE Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-38125 HIGH 8.8 UPGRADE UPGRADE Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerabili
- CVE-2023-27336 HIGH 7.5 UPGRADE UPGRADE Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability
- CVE-2023-27335 CRITICAL 9.6 UPGRADE UPGRADE Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability
- CVE-2023-27334 HIGH 7.5 UPGRADE UPGRADE Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability
FAQ
How do I fix edgeaggregator vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is edgeaggregator being exploited right now?
None of the tracked edgeaggregator CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which edgeaggregator CVE should I patch first?
CVE-2023-27335 currently ranks highest (52/100): Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability.