Description (CNA)
CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) contains an improper restriction of XML external entity reference (XXE) vulnerability. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Designer is installed may be disclosed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OMRON Corporation / CX-Designer | affected Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) |
CWE
No CWE identifiers supplied.
References
- https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-011_en.pdf
- https://jvn.jp/en/vu/JVNVU98683567/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.