medium5.0Public exploit code
CVE-2017-7457
XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Moxa MX AOPC-Server 1.5 - XML External Entity Injection2017-04-10 · remote · windows
Impact
XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moxa | Mx-Aopc Server | Version 1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://hyp3rlinx.altervista.org/advisories/MOXA-MX-AOPC-SERVER-v1.5-XML-EXTERNAL-ENTITY.txt
- http://seclists.org/fulldisclosure/2017/Apr/51
- https://www.exploit-db.com/exploits/41852/
- http://hyp3rlinx.altervista.org/advisories/MOXA-MX-AOPC-SERVER-v1.5-XML-EXTERNAL-ENTITY.txt
- http://seclists.org/fulldisclosure/2017/Apr/51
- https://www.exploit-db.com/exploits/41852/