critical9.1
CVE-2020-24052
Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary file…
Impact
Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition (DTD) in an XML request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moog | Exvf5c-2 Firmware | All versions |
| Moog | Exvp7c2-3 Firmware | All versions |