View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information.

The following versions of NSA GRASSMARLIN are affected:

GRASSMARLIN vers:all/*

CVSS Vendor Equipment Vulnerabilities

v3 5.5 NSA NSA GRASSMARLIN Improper Restriction of XML External Entity Reference

Background

Critical Infrastructure Sectors: Information Technology

Countries/Areas Deployed: Worldwide

Company Headquarters Location: United States

Vulnerabilities

Acknowledgments

Grady DeRosa reported this vulnerability to CISA

Legal Notice and Terms of Use

This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).

Recommended Practices

CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability.

Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.

Locate…