Security Advisory

CVE-2020-24052

9.1
CRITICAL

Vulnerability Description

Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition (DTD) in an XML request.
Published Date August 21, 2020
Official Source NIST NVD Advisory