high7.5
CVE-2020-10629
WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input.
Impact
WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Webaccess\/Nms | before 3.0.2 |