Rockwellautomation Logix Improper Restriction of XML External Entity Reference

2021-08-1000:00:00

www.tenable.com

0.001 Low

EPSS

Percentile

30.1%

JSON

Rockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02 vulnerable to an xml external entity (XXE) vulnerability, which may allow an attacker to view hostnames or other resources from the program.

File data ot_500474.nasl

VendorProductVersionCPE
rockwellautomationlogix_designer_studio_500032.00cpe:2.3:a:rockwellautomation:logix_designer_studio_5000:32.00:*:*:*:*:*:*:*
rockwellautomationlogix_designer_studio_500032.01cpe:2.3:a:rockwellautomation:logix_designer_studio_5000:32.01:*:*:*:*:*:*:*
rockwellautomationlogix_designer_studio_500032.02cpe:2.3:a:rockwellautomation:logix_designer_studio_5000:32.02:*:*:*:*:*:*:*
rockwellautomationstudio_5000_logix_designer32.00cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.00:*:*:*:*:*:*:*
rockwellautomationstudio_5000_logix_designer32.01cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.01:*:*:*:*:*:*:*
rockwellautomationstudio_5000_logix_designer32.02cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.02:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rockwellautomation	logix_designer_studio_5000	32.00	cpe:2.3:a:rockwellautomation:logix_designer_studio_5000:32.00:::::::*
rockwellautomation	logix_designer_studio_5000	32.01	cpe:2.3:a:rockwellautomation:logix_designer_studio_5000:32.01:::::::*
rockwellautomation	logix_designer_studio_5000	32.02	cpe:2.3:a:rockwellautomation:logix_designer_studio_5000:32.02:::::::*
rockwellautomation	studio_5000_logix_designer	32.00	cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.00:::::::*
rockwellautomation	studio_5000_logix_designer	32.01	cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.01:::::::*
rockwellautomation	studio_5000_logix_designer	32.02	cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.02:::::::*