Improper XML External Entity Reference in CX-Designer by Omron

CVE-2023-43624

What is CVE-2023-43624?

CX-Designer versions up to 3.740 contain a vulnerability that allows attackers to exploit improper XML external entity reference handling. By crafting a malicious project file, an attacker can induce the software to disclose sensitive information from the file system where CX-Designer is installed. This emphasizes the critical need for users to verify project files and update their software to mitigate potential risks.

References