Improper XML External Entity Reference in CX-Designer by Omron
CVE-2023-43624

5.5MEDIUM

Key Information:

Vendor

OMRON Corporation

Status
CX-Designer
Vendor
CVE Published:
23 October 2023

What is CVE-2023-43624?

CX-Designer versions up to 3.740 contain a vulnerability that allows attackers to exploit improper XML external entity reference handling. By crafting a malicious project file, an attacker can induce the software to disclose sensitive information from the file system where CX-Designer is installed. This emphasizes the critical need for users to verify project files and update their software to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4)

References

https://www.fa.omron.co.jp/product/security/assets/pdf/en...
https://jvn.jp/en/vu/JVNVU98683567/

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.