CVE-2024-12476
CVE-2024-12476
CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could
cause information disclosure, impacts workstation integrity and potential remote code execution on the
compromised computer, when specific crafted XML file is imported in the Web Designer configuration tool.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Schneider Electric · Web Designer for BMENOC0311(C)Schneider Electric · Web Designer for BMENOC0321(C)Schneider Electric · Web Designer for BMXNOE0110(H)Schneider Electric · Web Designer for BMXNOR0200HQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →