7.1
High
CVE-2020-14478 A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files…
Description
A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a denial-of-service condition and allow the attacker to arbitrarily read any local file via system-level services.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FactoryTalk Services Platform 6.11 | earliest → 6.11.00 | No fix stated |