CVE-2018-13415 - In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack

Back Back to CVE browser

CRITICAL

In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack

Published Aug 13, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 31.81%

Description

In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauthenticated attackers can use this vulnerability to: (1) Access arbitrary files from the filesystem with the same permission as the user account running Plex, (2) Initiate SMB connections to capture a NetNTLM challenge/response and crack to cleartext password, or (3) Initiate SMB connections to relay a NetNTLM challenge/response and achieve Remote Command Execution in Windows domains.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

References (3)

http://seclists.org/fulldisclosure/2018/Aug/1
mailing-listx_refsource_FULLDISCExploitMailing ListTechnical DescriptionThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-5358
Advisory
https://www.exploit-db.com/exploits/45146/
exploitx_refsource_EXPLOIT-DBTechnical DescriptionThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://seclists.org/fulldisclosure/2018/Aug/1		mailing-listx_refsource_FULLDISCExploitMailing ListTechnical DescriptionThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-5358		Advisory
https://www.exploit-db.com/exploits/45146/		exploitx_refsource_EXPLOIT-DBTechnical DescriptionThird Party AdvisoryVDB Entry