Unauthorized Remote Read via Out-of-Band Blind XXE in Cisco BroadWorks OCI Parser
Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗
A critical vulnerability (CVE-2026-20320) has been discovered in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks. This XML External Entity (XXE) injection flaw allows unauthenticated remote attackers to exploit improper XML parsing and external entity resolution enabled by default. By sending specially crafted XML messages to the OCI-Provisioning service, attackers can read sensitive configuration and filesystem data accessible to the BroadWorks user. Cisco rates the security impact as high and has issued software updates to remediate the issue. No workarounds currently exist.
Entenda a falha
A vulnerabilidade
CVE-2026-20320 is an out-of-band blind XML External Entity (XXE) injection flaw in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks, exposed through the OCI-Provisioning (OCI-P) service. An unauthenticated remote attacker who can reach the service can read sensitive configuration data and files from the filesystem, with the privileges of the BroadWorks user. Cisco rates the security impact as High. Cisco has released software updates, and there are no workarounds. The articles do not list affected or fixed version numbers.
Como funciona
A crafted XML message is sent to the OCI-P service, which hands it to the OCI XML parser. The parser processes the XML entries and, because external entity resolution is allowed by default, follows references to external entities contained in the message. In doing so it reads files from the local filesystem that the BroadWorks user can access. The flaw is blind and out-of-band, so the data is not returned directly in the response.
Por que é vulnerável
XML entries are improperly parsed because the parser allows external entity resolution by default, an insecure default configuration. Cisco says its updates address the issue but does not describe what the fix changes or why the flaw went unnoticed.
Onde está
The Open Client Interface (OCI) XML Parser of Cisco BroadWorks, reached through the OCI-P (Provisioning) service; the articles name no file or function.
Como foi descoberta
The articles do not say who found the flaw or how. Cisco disclosed it through a security advisory (cisco-sa-bworks-xxe-uwUd7CEt) published with the software updates.
Explicação gerada por IA a partir da matéria e dos artigos, em 12/11/2026 15:17.
Linha do tempo
-
sec.cloudapps.cisco.com ↗ · pub. 12/11/2026 14:25 · coletado 12/11 15:00 primeiro registro só resumo do feed
Unauthorized Remote Read via Out-of-Band Blind XXE in Cisco BroadWorks OCI Parser
ler a análise desta fonte ocultar
A critical vulnerability (CVE-2026-20320) has been discovered in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks. This XML External Entity (XXE) injection flaw allows unauthenticated remote attackers to exploit improper XML parsing and external entity resolution enabled by default. By sending specially crafted XML messages to the OCI-Provisioning service, attackers can read sensitive configuration and filesystem data accessible to the BroadWorks user. Cisco rates the security impact as high and has issued software updates to remediate the issue. No workarounds currently exist.