CVE-2020-24052 | BDVDB-2026-140489 Detail

Description#

Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition (DTD) in an XML request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://ioactive.com/moog-exo-series-multiple-vulnerabilities/
https://ioac.tv/3hy1xu6

Exploit#

No public exploit known

History#

Version 12020-08-21Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.