Description (CNA)
A vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions < V5.7 SP1 HF1), SIMOTION SCOUT V5.4 (All versions), SIMOTION SCOUT V5.5 (All versions), SIMOTION SCOUT V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT V5.7 (All versions < V5.7 SP1 HF1), SINAMICS STARTER V5.5 (All versions), SINAMICS STARTER V5.6 (All versions), SINAMICS STARTER V5.7 (All versions < V5.7 HF2). The affected application contains a XML External Entity Injection (XXE) vulnerability while parsing specially crafted XML files. This could allow an attacker to read arbitrary files in the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / SIMOTION SCOUT TIA V5.4 | affected 0 before * |
| Siemens / SIMOTION SCOUT TIA V5.5 | affected 0 before * |
| Siemens / SIMOTION SCOUT TIA V5.6 | affected 0 before V5.6 SP1 HF7 |
| Siemens / SIMOTION SCOUT TIA V5.7 | affected 0 before V5.7 SP1 HF1 |
| Siemens / SIMOTION SCOUT V5.4 | affected 0 before * |
| Siemens / SIMOTION SCOUT V5.5 | affected 0 before * |
| Siemens / SIMOTION SCOUT V5.6 | affected 0 before V5.6 SP1 HF7 |
| Siemens / SIMOTION SCOUT V5.7 | affected 0 before V5.7 SP1 HF1 |
| Siemens / SINAMICS STARTER V5.5 | affected 0 before * |
| Siemens / SINAMICS STARTER V5.6 | affected 0 before * |
| Siemens / SINAMICS STARTER V5.7 | affected 0 before V5.7 HF2 |
CWE
CWE-611
References
ADP enrichment
No English description supplied.
No references supplied.