Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability

T1Covered by 1 source · first reported by Cisco PSIRT at 19 Aug, 16:00 UTC

A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution…

security

Sources

• T1Cisco BroadWorks Out-of-Band Blind XML External Entity Injection VulnerabilityCisco PSIRT19 Aug, 16:00