CVE-2019-18227

HIGH

Advantech WISE-PaaS/RMM < 3.3.29 - XML External Entity Injection

Title source: llm
STIX 2.1

Description

Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data.

References (12)

Core 12
Core References
Mitigation, Third Party Advisory, US Government Resource x_refsource_misc
https://www.us-cert.gov/ics/advisories/icsa-19-304-01
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-954/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-944/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-936/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-945/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-947/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-953/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-942/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-943/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-946/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-939/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-959/

Scores

CVSS v3 7.5
EPSS 0.0354
EPSS Percentile 87.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-611
Status published
Products (1)
advantech/wise-paas\/rmm < 3.3.29
Published Oct 31, 2019
Tracked Since Feb 18, 2026