ZDI-CAN-20498: ZDI-23-1054: (Pwn2Own) Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability

Published Aug 9, 2023

Updated

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnerability.

Affected Software

1 affected component

Softing edgeConnector Siemens

Event History

Aug 9, 2023

Advisory Published

05:00 AM

Data Sourced

05:00 AM

Description

Feb 21, 2025

Advisory Published

via ZDI·06:40 AM

Frequently Asked Questions

What is the severity of ZDI-CAN-20498?

The severity of ZDI-CAN-20498 is critical due to its potential for remote denial-of-service attacks.

How do I fix ZDI-CAN-20498?

To fix ZDI-CAN-20498, apply the latest security patches provided by Softing for edgeConnector Siemens.

Can ZDI-CAN-20498 be exploited without authentication?

Yes, ZDI-CAN-20498 can be exploited without authentication, allowing remote attackers to initiate a denial-of-service condition.

What is the impact of ZDI-CAN-20498 on edgeConnector Siemens?

The impact of ZDI-CAN-20498 includes potential service outages and disruption of operations for affected edgeConnector Siemens installations.

Is there a specific version of edgeConnector Siemens affected by ZDI-CAN-20498?

ZDI-CAN-20498 affects multiple versions of edgeConnector Siemens, and users should check with Softing for detailed version information.