CVE-2020-10629

WebAccess/NMS versions prior to 3.0.2 does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files...

CVE-2020-10629

The CVE-2020-10629 entry concerns Advantech WebAccess/NMS before 3.0.2. The vulnerability is an XML External Entity (XXE) processing flaw in XML input handling, enabling reading of sensitive files. Affected component: input processing/XML parsing inside WebAccess/NMS; root cause: improper restric...