A specially crafted XML response can lead to a buffer overflow on the stack resulting in remote code execution. An attacker can set up a server on the local network to trigger this vulnerability.
So the local network has to be compromised first.
And if the local network is compromised, you can be in big trouble even without this vulnerability.
I hope that I understood it right.
That is correct. If the node if on a large network like a company network, this means that someone could attack the node from during the network.
