CVE-2018-17912
Quick assessment
Affected
unknown CASE Suite
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Fr. Sauter AG CASE Suite是瑞士Fr. Sauter AG公司的一套楼宇自动化系统软件开发工具包。 Fr. Sauter AG CASE Suite 3.10及之前版本中存在XML外部实体注入漏洞。远程攻击者可利用该漏洞造成文件泄露。
Possible ATT&CK Techniques 1 AI
T1212.001
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-17912
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Source: CVE Program / CVE List V5
Vulnerability Title
Fr. Sauter AG CASE Suite 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Fr. Sauter AG CASE Suite是瑞士Fr. Sauter AG公司的一套楼宇自动化系统软件开发工具包。 Fr. Sauter AG CASE Suite 3.10及之前版本中存在XML外部实体注入漏洞。远程攻击者可利用该漏洞造成文件泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| unknown | CASE Suite | Versions 3.10 and prior | - |
|
II. Public POCs for CVE-2018-17912
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-17912
请登录查看更多情报信息。
Vendor Advisories for CVE-2018-17912 (1)
Other References for CVE-2018-17912 (1)
-
https://ics-cert.us-cert.gov/advisories/ICSA-18-305-04 x_refsource_MISC
Same Patch Batch · unknown · 2018-11-02 · 13 CVEs total
| CVE-2018-3890 | Yi Home Camera 代码注入漏洞 | |
| CVE-2018-3891 | Yi Home Camera 27US 安全漏洞 | |
| CVE-2018-3892 | Yi Home Camera 27US 缓冲区错误漏洞 | |
| CVE-2018-3898 | Yi Home Camera 27US 缓冲区错误漏洞 | |
| CVE-2018-3899 | Yi Home Camera 缓冲区错误漏洞 | |
| CVE-2018-3920 | Yi Home Camera 27US 安全漏洞 | |
| CVE-2018-3934 | Yi Home Camera 27US 安全漏洞 | |
| CVE-2018-3935 | Yi Home Camera 27US 安全漏洞 | |
| CVE-2018-17918 | CIRCONTROL CirCarLife 授权问题漏洞 | |
| CVE-2018-17922 | CIRCONTROL CirCarLife 日志信息泄露漏洞 | |
| CVE-2018-17914 | Schneider Electric InduSoft Web Studio和InTouch Edge HMI 安全漏洞 | |
| CVE-2018-17916 | Schneider Electric InduSoft Web Studio和InTouch Edge HMI 缓冲区错误漏洞 |
IV. Related Vulnerabilities
Same vendor: unknown
-
CVE-2026-97315
Responsive Blocks < 2.3.0 - Unauthenticated HTML Injection i -
CVE-2026-88998
Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via -
CVE-2026-103308
Visma Pay for WooCommerce < 1.2.2 - Unauthenticated Payment -
CVE-2026-82844
WPForms Lite 1.10.0.1 - 2.0.2.1 - Unauthenticated Payment By -
CVE-2026-101301
WPCode 2.0.0 - 2.3.9 - Unauthenticated Snippet Suppression v
Same weakness: CWE-611
-
CVE-2026-106616
ColdFusion | Improper Restriction of XML External Entity Ref -
CVE-2026-90531
Adobe Experience Manager | Improper Restriction of XML Exter -
CVE-2026-54640
OpenRemote: XXE in KNXProtocol.startAssetImport() allows arb -
CVE-2026-93891
Security Vulnerability identified in IBM TRIRIGA - XXE -
CVE-2026-85970
Improper XML external entity restriction in Progress MarkLog
V. Comments for CVE-2018-17912
No comments yet