Cimetrics BACnet Explorer 4.0 XXE Injection

Cimetrics BACnet Explorer version 4.0 suffers from an XML eXternal Entity vulnerability that allows for remote retrieval of arbitrary data.

Leave a Reply