8.4 High

CVE-2024-12476 CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information…

Description

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts workstation integrity and potential remote code execution on the compromised computer, when specific crafted XML file is imported in the Web Designer configuration tool.

Affected products and versions

Product	Affected versions	Fixed in
Web Designer for BMXNOR0200H	Versions not published
Web Designer for BMXNOE0110(H)	Versions not published
Web Designer for BMENOC0311(C)	Versions not published
Web Designer for BMENOC0321(C)	Versions not published

Do you use Web Designer for BMXNOR0200H?

Track this CVE Watch Web Designer for BMXNOR0200H Check my SBOMs

www.cveye.io/en/cve/CVE-2024-12476

Timeline

Published January 17, 2025
Last modified February 12, 2025

References

download.schneider-electric.com download.schneider-electric.com

Track this CVE