PT-2018-10777 · Xovis · Xovis Pc3+1

Ayushman Dutta · Publicado 2018-08-30 · Atualizado 2018-10-22 · CVE-2018-11719

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xovis PC2, PC2R, and PC3 devices versions through 3.6.0

Description The issue allows XXE (XML External Entity) attacks.

Recommendations For Xovis PC2, PC2R, and PC3 devices versions through 3.6.0, update to a version later than 3.6.0 to resolve the issue.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2018-11719

Produtos afetados

Xovis Pc2

Xovis Pc3

Referências · 3

• https://xovis.com/security/xovis-sec-2018-002.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-11719 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-11719 · Nota de Segurança