CVE-2018-17912

—

CVSS 3.0

7.5 high

EPSS

2%p75

Published

Nov 2, 2018 (Nov 2, 2018)

Modified

Jun 17, 2026

Description

An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure.

Vendors: sauter-controls
Products: case suite
Weakness: CWE-611
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news1 stories

XML external entity flaw affects Sauter building automation product

Security AffairsNov 5, 10:32 UTC · Nov 5, 2018Vulnerability CVE-2018-17912

60