CVE-2021-43990CWE-611
ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform
Medium · published April 20, 2022
What it is
The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call.
The record
Technical detail
- CVSS v3.1
- 6.1 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00692 · 52.3th percentile
- Weakness
- CWE-611 · Improper Restriction of XML External Entity Reference
- Published
- 2022-04-20T15:30Z
EPSS history
Timeline