Description (CNA)
XG VisionTerminal, XG-X VisionTerminal, LJ Series Terminal-Software and WI Series Terminal-Software provided by Keyence Corporation improperly restrict XML external entity references. If a user opens a specially crafted setting file, the sensitive information stored in the system where the affected product is installed may be disclosed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Keyence Corporation / XG-X VisionTerminal | affected 0 through Ver.3.6.0000 |
| Keyence Corporation / XG VisionTerminal | affected 0 through Ver.5.5.0010 |
| Keyence Corporation / LJ Series Terminal-Software | affected 0 through Ver.2.4.0000 |
| Keyence Corporation / WI Series Terminal-Software | affected 0 through Ver.1.1.0000 |
CWE
CWE-611
References
- https://www.keyence.com/mi26082104
- https://www.keyence.com/mi26090802
- https://www.keyence.com/mi26090804
- https://jvn.jp/en/vu/JVNVU98062224/
ADP enrichment
No English description supplied.
No references supplied.