CVE-2023-46590

A vulnerability has been identified in Siemens OPC UA Modelling Editor SiOME All versions V2.8. Affected products suffer from a XML external entity XXE injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary...

CVE-2023-46590

Siemens OPC UA Modeling Editor (SiOME) is affected by an XXE injection in all versions prior to V2.8. The vulnerability allows attacker-controlled XML processing to read arbitrary files on the system. CVSS v3.1 base score is 7.5 (Networking, Low attack complexity, No privileges, No user interacti...

Siemens OPC UA Modeling Editor (SiOME)

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...