7.5 High

CVE-2023-46590 A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8)

Description

A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8). Affected products suffer from a XML external entity (XXE) injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary files in the system.

Affected products and versions

Product	Affected versions	Fixed in
Siemens OPC UA Modelling Editor (SiOME)	Versions not published

The 2 CVEs of Siemens OPC UA Modelling Editor (SiOME) →

CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Not rated

Do you use Siemens OPC UA Modelling Editor (SiOME)?

Track this CVE Watch Siemens OPC UA Modelling Editor (SiOME) Check my SBOMs

www.cveye.io/en/cve/CVE-2023-46590

Timeline

Published November 14, 2023
Last modified December 16, 2025

References

cert-portal.siemens.com cert-portal.siemens.com

Track this CVE

CVE-2023-46590 A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8)

Description

Affected products and versions

Other CVEs of Siemens OPC UA Modelling Editor (SiOME)