CVE-2024-12476 — Schneider Electric / Web Designer for BMXNOR0200H

Description (CNA)

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts workstation integrity and potential remote code execution on the compromised computer, when specific crafted XML file is imported in the Web Designer configuration tool.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / Web Designer for BMXNOR0200H	affected All versions
Schneider Electric / Web Designer for BMXNOE0110(H)	affected All versions
Schneider Electric / Web Designer for BMENOC0311(C)	affected All Versions
Schneider Electric / Web Designer for BMENOC0321(C)	affected All Versions

CWE

CWE-611

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-04.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.