Xxe

2013-04-0416:55:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

JSON

Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.

CPENameOperatorVersion
wonderware_win-xml_exportereq1522.148.0.0

CPE	Name	Operator	Version
	wonderware_win-xml_exporter	eq	1522.148.0.0

References

ics-cert.us-cert.gov/pdf/ICSA-13-067-02.pdf