CVE-2023-46590CWE-611

A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8)

High · published November 14, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8). Affected products suffer from a XML external entity (XXE) injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary files in the system.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00652 · 50.6th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2023-11-14T11:04Z
EPSS history
Timeline
  • 14 NOV 11:04Z
    A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8)
    cvelistv5