CVE Vulnerabilities

CVE-2017-7457

Improper Restriction of XML External Entity Reference

Published: Apr 14, 2017 | Modified: Apr 20, 2025
CVSS 3.x
5
MEDIUM
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS 2.x
1.9 LOW
AV:L/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

XML External Entity via .AOP files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure.

Weakness

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

Affected Software

Name Vendor Start Version End Version
Mx-aopc_server Moxa 1.5 (including) 1.5 (including)

Potential Mitigations

References