Schneider Electric OPC Factory Server XML External Entity Injection Vulnerability

Schneider Electric OPC Factory Server is a software application from the French company Schneider Electric (Schneider Electric). An XML external entity injection vulnerability exists in Schneider Electric OPC Factory Server, which stems from an improper restriction on XML external entity references, and can be exploited by an attacker to cause unauthorized read access to the file system.