CVE-2018-10832
MEDIUMModbusPal 1.6b - XML External Entity Injection via Crafted .xmpp or .xmpa Files
Title source: manualExploitation Summary
EIP tracks 1 public exploit for CVE-2018-10832. PoCs published by Trent Gordon.
AI-analyzed exploit summary This exploit demonstrates an XXE injection vulnerability in ModbusPal 1.6b, allowing an attacker to exfiltrate local file contents by crafting malicious .xmpp or .xmpa files. The PoC uses a remote XML entity to read /etc/issue and send its contents to an attacker-controlled server.
Description
ModbusPal 1.6b is vulnerable to an XML External Entity (XXE) attack. Projects are saved as .xmpp files and automations can be exported as .xmpa files, both XML-based, which are vulnerable to XXE injection. Sending a crafted .xmpp or .xmpa file to a user, when opened/imported in ModbusPal, will return the contents of any local files to a remote attacker.
Exploits (1)
This exploit demonstrates an XXE injection vulnerability in ModbusPal 1.6b, allowing an attacker to exfiltrate local file contents by crafting malicious .xmpp or .xmpa files. The PoC uses a remote XML entity to read /etc/issue and send its contents to an attacker-controlled server.
References (2)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N