CVE-2020-24052

2020-08-2114:25:50

mitre

www.cve.org

9.2 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.5%

JSON

Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition (DTD) in an XML request.

References

ioac.tv/3hy1xu6

ioactive.com/moog-exo-series-multiple-vulnerabilities/