CVE-2024-0860
Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator
| Assigner | icscert |
| Reserved | 2024-01-24 |
| Published | 2024-03-14 |
| Updated | 2024-08-12 |
The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets to craft their own requests.
| CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Pan ZhenPeng (@Peterpan0927) and Li JianTao (@CurseRed) of STAR Labs SG Pte. Ltd. (@starlabs_sg) working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA. Claroty Team82 working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA
https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-13
