CVE-2023-38126

Deeper analysis

CVE-2023-38126 is a directory traversal vulnerability in Softing edgeAggregator that permits remote code execution. The flaw lies in the handling of backup zip files during restore operations, where insufficient validation of user-supplied paths allows an attacker to write files outside the intended directory. The issue was originally reported as ZDI-CAN-20543 and carries a CVSS 3.1 score of 7.2.

An authenticated attacker with administrative privileges can supply a maliciously crafted zip archive over the network to achieve arbitrary code execution in the context of the root user. No unauthenticated or low-privileged exploitation paths are described.

The referenced Zero Day Initiative advisory provides technical details of the flaw but does not include public information on vendor patches or specific mitigation steps beyond the general recommendation to apply updates when available. The associated EPSS score has remained flat at 0.0648 since disclosure.