5.5
Medium
CVE-2022-1018 When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity…
Description
When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker could exploit this to pass data from local files to a remote web server, leading to a loss of confidentiality.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Connected Component Workbench 12 | earliest → < 12 | 12 |
| ISaGRAF 6.6 | earliest → < 6.6.9 | 6.6.9 |
| Safety Instrumented Systems Workstation 1.1 | earliest → < 1.1 | 1.1 |