Lucene search

[email protected]NVD:CVE-2023-29498

HistoryJun 13, 2023 - 10:15 a.m.

CVE-2023-29498

2023-06-1310:15:10

CWE-611

[email protected]

web.nvd.nist.gov

xml external entity

frenic rhc loader

disclosure

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

24.0%

JSON

Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier. If a user opens a specially crafted project file, sensitive information on the system where the affected product is installed may be disclosed.

Affected configurations

Nvd

Node

fujielectricfrenic_rhc_loaderRange≤1.1.0.3

VendorProductVersionCPE
fujielectricfrenic_rhc_loader*cpe:2.3:a:fujielectric:frenic_rhc_loader:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fujielectric	frenic_rhc_loader	*	cpe:2.3:a:fujielectric:frenic_rhc_loader::::::::

References

felib.fujielectric.co.jp/download/details.htm?dataid=45829407&site=global&lang=en

jvn.jp/en/vu/JVNVU97809354/

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

24.0%

JSON

Related for NVD:CVE-2023-29498

cvelist1 prion1 cve1