Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.
References
| Link | Resource |
|---|---|
| http://ics-cert.us-cert.gov/pdf/ICSA-13-067-02.pdf | US Government Resource |
| http://ics-cert.us-cert.gov/pdf/ICSA-13-067-02.pdf | US Government Resource |
Configurations
History
21 Nov 2024, 01:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://ics-cert.us-cert.gov/pdf/ICSA-13-067-02.pdf - US Government Resource |
Information
Published : 2013-04-04 16:55
Updated : 2024-11-21 01:43
NVD link : CVE-2012-4710
Mitre link : CVE-2012-4710
CVE.ORG link : CVE-2012-4710
JSON object : View
Products Affected
invensys
- wonderware_win-xml_exporter
CWE
CWE-20
Improper Input Validation