Description (CNA)
Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Lantronix / Provisioning Manager | affected 0 through 7.10.2 |
CWE
CWE-611
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-02
- https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/105906637/Latest+Version+of+Lantronix+Provisioning+Manager+LPM
ADP enrichment
No English description supplied.
No references supplied.