CVE-2014-5398

LOW · 2.1 CVSS Gepubliceerd: 28-08-2014 CWE-20

Beschrijving

Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Vendors

Invensys

Affected products

Wonderware Information Server

References

github.com
www.cisa.gov
ics-cert.us-cert.gov