VYPR

ModbusPal

by ModbusPal

CVEs (1)

  • CVE-2018-10832MedMay 11, 2018
    risk 0.39cvss 5.5epss 0.06

    ModbusPal 1.6b is vulnerable to an XML External Entity (XXE) attack. Projects are saved as .xmpp files and automations can be exported as .xmpa files, both XML-based, which are vulnerable to XXE injection. Sending a crafted .xmpp or .xmpa file to a user, when opened/imported in…