Vulnerabilities

CVSS

7.4 High

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Risk score

59.2

Published

2026-08-28

Status

Received

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications.

Weaknesses

CWE-295

Coverage 1

vulnerability

Applied Systems Engineering ASE2000 V2 Communications Test Set

Applied Systems Engineering’s ASE2000 V2 Communications Test Set versions 2.25 through 2.37 are vulnerable to two separate attacks. The first stems from an improper XML External Entity Reference (CWE-611) due to a Log4Ne…

CISA Advisories · 3d ago High

CVE-2018-1285CVE-2026-18717log4netxml external entitycertificate validation

All articles mentioning it

Advisories and references

• ase-systems.com
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...
• cisa.gov/news-events/ics-advisories/icsa-26-239-04