6 matches found
CVE-2024-12476
CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts workstation integrity and potential remote code execution on the compromised computer, when specific crafted XML file is imported in the Web Designer configuration...
CVE-2024-12476
CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts workstation integrity and potential remote code execution on the compromised computer, when specific crafted XML file is imported in the Web Designer configuration...
CVE-2024-12476
creationtimestamp| type| source ---|---|--- 2025-01-17 09:44:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113843049497825607 2025-01-17 09:56:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2111 2025-01-17 10:15:29+00:00| seen|...
CVE-2024-12476
CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts workstation integrity and potential remote code execution on the compromised computer, when specific crafted XML file is imported in the Web Designer configuration...
CVE-2024-12476
CVE-2024-12476 affects Schneider Electric Web Designer configuration tool. The defect is an XML External Entity (XXE) reference vulnerability (CWE-611) in the XML import path, leading to information disclosure, potential workstation integrity impact, and possible remote code execution on the comp...
CVE-2024-12476
CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts workstation integrity and potential remote code execution on the compromised computer, when specific crafted XML file is imported in the Web Designer configuration...