Vulnerability Spotlight: Multiple vulnerabilities in Genivia gSOAP
Summary: Cisco Talos discovered multiple vulnerabilities in Genivia gSOAP 2.8.107 plugins, including three denial-of-service flaws in the WS-Security plugin, one denial-of-service flaw in the WS-Addressing plugin, and one code execution flaw in the WS-Addressing plugin, all triggered by specially crafted SOAP requests sent over HTTP. Talos worked with Genivia under its coordinated disclosure policy to release an update, and published Snort rules 56211, 56275, 56297, 56298, 56307, 56308 and 56507 through 56510 to detect exploitation attempts.
Why it matters: One of these five flaws, CVE-2020-13576, allows remote code execution, not just a denial of service, and every one of them is reachable through an ordinary HTTP request to a SOAP endpoint running gSOAP 2.8.107.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-13574CVE-2020-13575CVE-2020-13576CVE-2020-13577CVE-2020-13578
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026