5.5 Medium

CVE-2023-37200 A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of…

Description

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.

Affected products and versions

Product	Affected versions	Fixed in
EcoStruxure OPC UA Server Expert	Versions not published

Do you use EcoStruxure OPC UA Server Expert?

Track this CVE Watch EcoStruxure OPC UA Server Expert Check my SBOMs

www.cveye.io/en/cve/CVE-2023-37200

Timeline

Published July 12, 2023
Last modified November 7, 2024

References

download.schneider-electric.com download.schneider-electric.com

Track this CVE