CVE-2020-24052

Katalog CVE

CVSS 9.1 · Critical EPSS 1,9%

Kerentanan Improper Restriction of XML External Entity Reference pada moog exvf5c-2 firmware, moog exvp7c2-3 firmware. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition (DTD) in an XML request.

Rincian

Terbit di NVD

21 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-611: Improper Restriction of XML External Entity Reference

EPSS (30 hari)

1,9% peluang dieksploitasi; lebih tinggi dari 79,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://ioac.tv/3hy1xu6 exploit · advisory pihak ketiga
• https://ioactive.com/moog-exo-series-multiple-vulnerabilities/ advisory pihak ketiga