ID:6116 - Exploit for XXE attack in Microsoft SQL Server Management Studio - CVE-2018-8533

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to conduct XXE-attack.

The vulnerability exists due to an error when parsing a malicious REGSRVR file containing a reference to an external entity. A remote attacker can trick the victim into opening a specially crafted XML file and gain access to potentially sensitive information.

Remediation