A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8). Affected products suffer from a XML external entity (XXE) injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary files in the system.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-197270.pdf | Patch Vendor Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-197270.pdf | Patch Vendor Advisory |
Configurations
History
21 Nov 2024, 08:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-197270.pdf - Patch, Vendor Advisory |
20 Nov 2023, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-197270.pdf - Patch, Vendor Advisory | |
| First Time |
Siemens siemens Opc Ua Modeling Editor
Siemens |
|
| CPE | cpe:2.3:a:siemens:siemens_opc_ua_modeling_editor:*:*:*:*:*:*:*:* |
14 Nov 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-14 11:15
Updated : 2024-11-21 08:28
NVD link : CVE-2023-46590
Mitre link : CVE-2023-46590
CVE.ORG link : CVE-2023-46590
JSON object : View
Products Affected
siemens
- siemens_opc_ua_modeling_editor
CWE
CWE-611
Improper Restriction of XML External Entity Reference