Improper Restriction of XML External Entity Reference in Schneider Electric Software
CVE-2023-2161
5MEDIUM
Key Information:
- Vendor
Schneider Electric
- Status
- Vendor
- CVE Published:
- 16 May 2023
What is CVE-2023-2161?
An improper restriction of XML external entity reference vulnerability exists in Schneider Electric Software. This vulnerability can enable a local user with malicious intent to load a specially crafted configuration file, potentially leading to unauthorized access to the file system. It's crucial for users to update their software to mitigate this risk and safeguard their data.
Affected Version(s)
OPC Factory Server (OFS) Versions prior to V3.63SP2