Vulnerability CVE-2017-7457
Published: 2017-04-14

Description:
XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure.

See advisories in our WLB2 database:
Topic
Author
Date
High
Moxa MX AOPC-Server v1.5 XML External Entity
hyp3rlinx
10.04.2017

CVSS2 => (AV:L/AC:M/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
1.9/10
2.9/10
3.4/10
Exploit range
Attack complexity
Authentication
Local
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
MOXA -> Mx-aopc server 

 References:
http://hyp3rlinx.altervista.org/advisories/MOXA-MX-AOPC-SERVER-v1.5-XML-EXTERNAL-ENTITY.txt
http://seclists.org/fulldisclosure/2017/Apr/51
Copyright 2024, cxsecurity.com

 

Back to Top