5.0 Medium

CVE-2023-2161 A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized read…

Description

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized read access to the file system when a malicious configuration file is loaded on to the software by a local user.

Affected products and versions

Product	Affected versions	Fixed in
OPC Factory Server (OFS)	Versions not published

The 2 CVEs of OPC Factory Server (OFS) →

CVE-2014-0789 Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory… 5.0 Not rated

Do you use OPC Factory Server (OFS)?

Track this CVE Watch OPC Factory Server (OFS) Check my SBOMs

www.cveye.io/en/cve/CVE-2023-2161

Timeline

Published May 16, 2023
Last modified January 22, 2025

References

download.schneider-electric.com download.schneider-electric.com

Track this CVE

CVE-2023-2161 A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized read…

Description

Affected products and versions

Other CVEs of OPC Factory Server (OFS)