Skip to content
OpenAdvisories
Critical ICSA-26-239-04 2 CVEs

Applied Systems Engineering ASE2000 V2 Communications Test Set

Published Aug 27, 2026 · Updated Aug 27, 2026

Vendor: Applied Systems Engineering Product: ASE2000

Summary

Successful exploitation of these vulnerabilities could allow an attacker to read or write arbitrary local files, cause the application to issue outbound network requests, or intercept the connection to impersonate the trusted peer, complete the TLS handshake, and read or modify the protected communications.

Vulnerabilities 2

  • Critical 9.8
    CVE-2018-1285 Public exploit EPSS 18%

    XML External Entity attack in log4net

    Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.

    log4net log4net log4net Debian Ubuntu NuGet
  • High 7.4
    CVE-2026-18717

    Improper Certificate Validation in ASE 2000

    ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications.

    Applied Systems Engineering ASE2000 V2

Revision history

  1. #1

    Initial Publication

References