cbcvebase.

Spirton Universal Media Server vulnerabilities

1 known vulnerability affecting spirton/universal_media_server.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2018-13416P2CRITICALCVSS 9.8PoCv7.1.02018-08-03
CVE-2018-13416 [CRITICAL] CWE-611 CVE-2018-13416: In Universal Media Server (UMS) 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnera In Universal Media Server (UMS) 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauthenticated attackers can use this vulnerability to: (1) Access arbitrary files from the filesystem with the same permission as the user account running UMS, (2) Initiate SMB connect
nvd
Spirton Universal Media Server vulnerabilities | cvebase