CVE-2018-17912

EUVD-2018-9653
An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
sauter-controlscase_suite
𝑥
≤ 3.10
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/105804
https://ics-cert.us-cert.gov/advisories/ICSA-18-305-04
http://www.securityfocus.com/bid/105804
https://ics-cert.us-cert.gov/advisories/ICSA-18-305-04