Lucene search
SchneiderCVELIST:CVE-2018-7837HistoryDec 24, 2018 - 4:00 p.m.
CVE-2018-7837
2018-12-2416:00:00
schneider
www.cve.org
0.006 Low
EPSS
Percentile
79.2%
An Improper Restriction of XML External Entity Reference (‘XXE’) vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the software to embed incorrect documents into its output and expose restricted information.
CNA Affected
[
{
"product": "IIoT Monitor 3.1.38",
"vendor": "Schneider Electric SE",
"versions": [
{
"status": "affected",
"version": "IIoT Monitor 3.1.38"
}
]
}
]Related
zdi
zdi
cve
cve
CVE-2018-7837
2018-12-24 16:29:00
prion
prion
Xxe
2018-12-24 16:29:00
nvd
nvd
CVE-2018-7837
2018-12-24 16:29:00
ics
ics
Schneider Electric IIoT Monitor (Update A)
2019-01-15 12:00:00