Description (CNA)
When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker could exploit this to pass data from local files to a remote web server, leading to a loss of confidentiality.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rockwell Automation / Connected Component Workbench | affected All before 12 |
| Rockwell Automation / ISaGRAF | affected All before 6.6.9 |
| Rockwell Automation / Safety Instrumented Systems Workstation | affected All before 1.1 |
CWE
CWE-611
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.