Vulnerability Details CVE-2020-24052
Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition (DTD) in an XML request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 79.7%
CVSS Severity
CVSS v3 Score 9.1
CVSS v2 Score 6.4
References
Products affected by CVE-2020-24052
-
cpe:2.3:h:moog:exvf5c-2:-
-
cpe:2.3:h:moog:exvp7c2-3:-
-
cpe:2.3:o:moog:exvf5c-2_firmware:-
-
cpe:2.3:o:moog:exvp7c2-3_firmware:-