5.5
Moyenne
CVE-2022-1018 When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity…
Description
When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker could exploit this to pass data from local files to a remote web server, leading to a loss of confidentiality.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Connected Component Workbench 12 | premières → < 12 | 12 |
| ISaGRAF 6.6 | premières → < 6.6.9 | 6.6.9 |
| Safety Instrumented Systems Workstation 1.1 | premières → < 1.1 | 1.1 |