CVE-2014-5398CWE-20

Schneider Electric Wonderware Input Validation

Low · published August 28, 2014

CVSS v2.0
2.1
EPSS
1%
Percentile
45.9
In the wild
Unconfirmed
What it is

Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

The record
Technical detail
CVSS v2.0
2.1 · LOW
Vector
AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00565 · 45.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2014-08-28T01:00Z
EPSS history
Timeline
  • 28 AUG 01:00Z
    Schneider Electric Wonderware Input Validation
    cvelistv5