Improper Restriction of XML External Entity in Omron NB-series NX-Designer

CVE-2024-12298

What is CVE-2024-12298?

A vulnerability exists in Omron's NB-series NX-Designer that allows attackers to exploit improper limitations on XML external entity references. By leveraging this weakness, malicious actors can potentially gain unauthorized access to sensitive data stored on affected systems. This vulnerability emphasizes the importance of proper input validation and configuration, as it may lead to significant information disclosure if not addressed.

References