XML external entity injection in WebAccess/NMS
Priority LOW 35CWE-611Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-611 and the CVSS impact.
Summary
WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files.
Why it matters now
EPSS 0.01231 69th percentileScored 2026-11-07
Fix Fixed WebAccess/NMS: 3.0.2
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | WebAccess/NMS | before 3.0.2 | 3.0.2 | Patch available | CNA |
- WebAccess/NMS Vendor— Affected before 3.0.2 Fixed in 3.0.2 Patch available CNA
Remediation
- Fix · CNA WebAccess/NMS Fixed in 3.0.2
Timeline
- 2026-10-02 Threatist record created from CVE-2020-10629
- 2026-10-03 Alias added: GHSA-f4q7-86mf-q9v2
References
More Advantech Webaccess/nms vulnerabilities
- TI-2020-08531 Path traversal in WebAccess/NMS CVSS 3.1CRITICAL 9.1
- TI-2018-06387 Heap-based buffer overflow in Advantech WebAccess CVSS 3.1CRITICAL 9.8
- TI-2018-07478 Path traversal in Advantech WebAccess CVSS 3.0CRITICAL 9.8
- TI-2018-05408 Stack-based buffer overflow in Advantech WebAccess CVSS 3.1CRITICAL 9.8
- TI-2018-05414 Access control flaw in Advantech WebAccess CVSS 3.0CRITICAL 9.8
- TI-2018-05406 NULL pointer dereference in Advantech WebAccess CVSS 3.0CRITICAL 9.8
Sources
- CVE-2020-10629 · CVE Program
- CVE-2020-10629 · NVD
- FIRST EPSS
- GHSA-f4q7-86mf-q9v2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences