Applied Systems Engineering ASE2000 V2 Communications Test Set

Applied Systems Engineering’s ASE2000 V2 Communications Test Set versions 2.25 through 2.37 are vulnerable to two separate attacks. The first stems from an improper XML External Entity Reference (CWE-611) due to a Log4Net vulnerability, allowing attackers to read or write arbitrary files and intercept network communica…