Vulnerabilities > CVE-2019-18227 - XXE vulnerability in Advantech Wise-Paas/Rmm 3.3.29
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |
Common Weakness Enumeration (CWE)
References
- https://www.us-cert.gov/ics/advisories/icsa-19-304-01
- https://www.zerodayinitiative.com/advisories/ZDI-19-944/
- https://www.zerodayinitiative.com/advisories/ZDI-19-939/
- https://www.zerodayinitiative.com/advisories/ZDI-19-943/
- https://www.zerodayinitiative.com/advisories/ZDI-19-942/
- https://www.zerodayinitiative.com/advisories/ZDI-19-947/
- https://www.zerodayinitiative.com/advisories/ZDI-19-959/
- https://www.zerodayinitiative.com/advisories/ZDI-19-953/
- https://www.zerodayinitiative.com/advisories/ZDI-19-945/
- https://www.zerodayinitiative.com/advisories/ZDI-19-954/
- https://www.zerodayinitiative.com/advisories/ZDI-19-936/
- https://www.zerodayinitiative.com/advisories/ZDI-19-946/