PT-2022-12482 · Netscout · Netscout Ngeniusone

Lukasz Plonka · Published 2022-06-02 · Updated 2022-06-13 · CVE-2021-45981

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetScout nGeniusONE version 6.3.2

Description The issue allows an XML External Entity (XXE) attack. This type of attack occurs when an application parses XML input that contains an external entity, allowing an attacker to access local or remote resources.

Recommendations For NetScout nGeniusONE version 6.3.2, consider disabling XML parsing or restricting the use of external entities to minimize the risk of exploitation until a patch is available.

Fix

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2021-45981

Affected Products

Netscout Ngeniusone

References · 5

• https://netscout.com/securityadvisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45981 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45981 · Vendor Advisory
• https://netscout.com · Note
• https://t.me/cibsecurity/43766 · Telegram Post