Softing edgeConnector

An attacker with access to your local network could execute arbitrary commands on the edgeConnector or edgeAggregator device, potentially allowing them to alter data collection, compromise sensor readings, or disrupt communication between your control systems and edge devices.

Water and electric utilities, as well as any manufacturing or infrastructure operator using Softing edgeConnector or edgeAggregator for SCADA data aggregation and remote monitoring should assess this risk. These products are commonly used as gateways between industrial sensors and central control systems.

An attacker on the same local network (e.g., via compromised workstation or wireless access) could craft a malicious file or link that exploits the path traversal flaw. If a user interacts with it (opens a file, clicks a link), the attacker gains code execution on the edge device. The cleartext transmission vulnerability may allow credentials or sensitive data to be intercepted during normal operation.