CVE-2018-10077

MEDIUM

Geist WatchDog Console 3.2.2 - Info Disclosure

Title source: llm

Description

XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data.

Exploits (1)

exploitdb WORKING POC

by bzyo · textwebappsxml

https://www.exploit-db.com/exploits/44493

View Code ZIP pw:eip

References (2)

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html

[Exploit, Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/44493/

Scores

CVSS v3 4.9

EPSS 0.1411

EPSS Percentile 94.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-611

Status published

Affected Products (1)

vertiv/watchdog_console

Timeline

Published Apr 20, 2018

Tracked Since Feb 18, 2026