PatchTheCVEedgeconnector vulnerabilities and fixes
Recent CVEs affecting edgeconnector, with upgrade or downgrade steps. 5 tracked.
edgeconnector has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-05-03. Highest priority: CVE-2023-27334 (score 50/100).
- CVE-2024-0860 HIGH 8.0 DOWNGRADE DOWNGRADE The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which
- CVE-2023-39482 MEDIUM 6.5 UPGRADE UPGRADE Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability
- CVE-2023-38125 HIGH 8.8 UPGRADE UPGRADE Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerabili
- CVE-2023-27336 HIGH 7.5 UPGRADE UPGRADE Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability
- CVE-2023-27334 HIGH 7.5 UPGRADE UPGRADE Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability
FAQ
How do I fix edgeconnector vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is edgeconnector being exploited right now?
None of the tracked edgeconnector CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which edgeconnector CVE should I patch first?
CVE-2023-27334 currently ranks highest (50/100): Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability.