Vulnerability Details CVE-2019-18227
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.035
EPSS Ranking 87.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://www.us-cert.gov/ics/advisories/icsa-19-304-01
- https://www.zerodayinitiative.com/advisories/ZDI-19-936/
- https://www.zerodayinitiative.com/advisories/ZDI-19-939/
- https://www.zerodayinitiative.com/advisories/ZDI-19-942/
- https://www.zerodayinitiative.com/advisories/ZDI-19-943/
- https://www.zerodayinitiative.com/advisories/ZDI-19-944/
- https://www.zerodayinitiative.com/advisories/ZDI-19-945/
- https://www.zerodayinitiative.com/advisories/ZDI-19-946/
- https://www.zerodayinitiative.com/advisories/ZDI-19-947/
- https://www.zerodayinitiative.com/advisories/ZDI-19-953/
- https://www.zerodayinitiative.com/advisories/ZDI-19-954/
- https://www.zerodayinitiative.com/advisories/ZDI-19-959/
- https://www.us-cert.gov/ics/advisories/icsa-19-304-01
- https://www.zerodayinitiative.com/advisories/ZDI-19-936/
- https://www.zerodayinitiative.com/advisories/ZDI-19-939/
- https://www.zerodayinitiative.com/advisories/ZDI-19-942/
- https://www.zerodayinitiative.com/advisories/ZDI-19-943/
- https://www.zerodayinitiative.com/advisories/ZDI-19-944/
- https://www.zerodayinitiative.com/advisories/ZDI-19-945/
- https://www.zerodayinitiative.com/advisories/ZDI-19-946/
- https://www.zerodayinitiative.com/advisories/ZDI-19-947/
- https://www.zerodayinitiative.com/advisories/ZDI-19-953/
- https://www.zerodayinitiative.com/advisories/ZDI-19-954/
- https://www.zerodayinitiative.com/advisories/ZDI-19-959/
Products affected by CVE-2019-18227
-
cpe:2.3:a:advantech:wise-paas/rmm:-
-
cpe:2.3:a:advantech:wise-paas/rmm:3.3.29