A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8). Affected products suffer from a XML external entity (XXE) injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary files in the system.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Siemens |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-50793 | A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8). Affected products suffer from a XML external entity (XXE) injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary files in the system. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 08 Jan 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: siemens
Published:
Updated: 2025-01-08T16:19:58.713Z
Reserved: 2023-10-23T09:54:54.674Z
Link: CVE-2023-46590
Vulnrichment
Updated: 2024-08-02T20:45:42.417Z
NVD
Status : Modified
Published: 2023-11-14T11:15:15.063
Modified: 2024-11-21T08:28:51.553
Link: CVE-2023-46590
Redhat
No data.
OpenCVE Enrichment
No data.