CVE-2024-1167

When SEW-EURODRIVE MOVITOOLS MotionStudio processes XML information unrestricted file access can occur...

CVE-2024-1167

CVE-2024-1167 affects SEW-EURODRIVE MOVITOOLS MotionStudio (affected: version 6.5.0.2) with an XML External Entity (XXE) processing flaw when handling SEWPROJ/XML data, leading to unrestricted file access within the process. Root cause: improper restriction of XML External Entity references (CWE-...

SEW-EURODRIVE MOVITOOLS MotionStudio

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.6 ATTENTION : Low attack complexity Vendor : SEW-EURODRIVE Equipment : MOVITOOLS MotionStudio Vulnerability : Improper Restriction of XML EXTERNAL Entity Reference 2. RISK EVALUATION Successful exploitation of this vulnerability could result in open access...