Back to Database
Status published
High
CVE-2024-0860
Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator
Vulnerability Description
The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets to craft their own requests.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-0860
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Pan ZhenPeng (@Peterpan0927) and Li JianTao (@CurseRed) of STAR Labs SG Pte. Ltd. (@starlabs_sg) working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA. Claroty Team82 working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA
More from Softing
View All →CVE-2025-7390
Bypass the client certificate trust check of an opc.https server while only secure communication is allowed
Critical
9.1
CVE-2025-13406
Scanning for higher HART revision device leads into NULL pointer dereference in live list
Medium
6.8
CVE-2025-10685
HTTP POST with specific higher content length leads into heap corruption
High
7.7
CVE-2025-10461
Global file reads caused by improper URL checks in webserver
Medium
5.3
CVE-2024-14028
Multiple implicit reads in parallel can result in a crash or denial of service
Medium
6.5
Affected Vendor
Softing
View all reports →Affected Software
edgeConnector, edgeAggregator
Vulnerable Versions:
Version 3.60
Timeline
Official Publish:
March 14th, 2024
Last Modified:
August 12th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H