Description (CNA)
A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a denial-of-service condition and allow the attacker to arbitrarily read any local file via system-level services.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rockwell Automation / FactoryTalk Services Platform | affected unspecified through 6.11.00 |
CWE
CWE-611
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.