CVE-2018-20687

CRITICO 9.8CVE-2018-20687 · Published 18/11/2019 · updated 17/06/2026

In breve

CVE-2018-20687 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda commandcenter secure gateway (raritan).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.5%, superiore al 85.0% delle vulnerabilità.
Correzione: aggiornare a 8.0.0 o successiva.

Package	Affected versions	Patched versions
commandcenter secure gateway raritan	`< 8.0.0`	`8.0.0`

Description

An XML external entity (XXE) vulnerability in CommandCenterWebServices/.*?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

References

packetstormsecurity.com/files/155359/Raritan-CommandCenter-Secure-Gateway-XML-Injection.html · Third Party Advisory
seclists.org/fulldisclosure/2019/Nov/11 · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free