Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the input parameters provided to the edgeAggregetor client. The issue results from the lack of proper validation of user-supplied data, which can lead to the injection of an arbitrary script. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20504.
The vulnerability results from insufficient validation of user-supplied data in the input parameters of the edgeAggregator client. The lack of this validation allows injection of arbitrary scripts (XSS). For the exploit to work, the victim must visit a malicious website or open a malicious file. The attacker can then exploit this vulnerability in combination with other flaws to achieve arbitrary code execution with root privileges.
An attacker can execute arbitrary code in the context of the root user on the attacked system, which means complete takeover of the device, including the ability to compromise confidentiality, integrity, and availability of data.
Patches available from the vendor should be applied in accordance with the references. Detailed information is available in the Zero Day Initiative advisory at https://www.zerodayinitiative.com/advisories/ZDI-23-1057/
Softing edgeAggregator and Softing Secure Integration Server — versions indicated in the vendor references and ZDI-23-1057 advisory
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HSofting Edgeaggregator
APPSofting< 3.70Softing Secure Integration Server
APPSofting< 1.30
Related vulnerabilities
Softing — domyślne dane uwierzytelniające administratora (admin/admin)
Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vul...
Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerabili...
Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulne...
Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability. Th...