Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier. If a user opens a specially crafted project file, sensitive information on the system where the affected product is installed may be disclosed.
References
| Link | Resource |
|---|---|
| https://felib.fujielectric.co.jp/download/details.htm?dataid=45829407&site=global&lang=en | Product |
| https://jvn.jp/en/vu/JVNVU97809354/ | Third Party Advisory |
Configurations
History
22 Jun 2023, 15:55
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:fujielectric:frenic_rhc_loader:*:*:*:*:*:*:*:* | |
| CWE | CWE-611 | |
| References | (MISC) https://jvn.jp/en/vu/JVNVU97809354/ - Third Party Advisory | |
| References | (MISC) https://felib.fujielectric.co.jp/download/details.htm?dataid=45829407&site=global&lang=en - Product | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Fujielectric
Fujielectric frenic Rhc Loader |
13 Jun 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-13 10:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-29498
Mitre link : CVE-2023-29498
CVE.ORG link : CVE-2023-29498
JSON object : View
Products Affected
fujielectric
- frenic_rhc_loader
CWE
CWE-611
Improper Restriction of XML External Entity Reference