VulnerabilityModified
CVE-2018-10077
XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data.
MEDIUM 4.9EPSS 8.13%
Does this matter?
Lower severity and a low EPSS score (8.13%). Track it; it rarely justifies an emergency change on its own.
Description
XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data.
- CVSS 3.1
- 4.9 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 8.13% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-611
- Affected
- vertiv/watchdog console
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.htmlExploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/44493/Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.htmlExploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/44493/Exploit, Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.