CVE-2012-4710

Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.

Score

CVSS 2.0 9.3 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2013-04-04

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Wonderware Win-xml Exporter (Invensys)

References

• http://ics-cert.us-cert.gov/pdf/ICSA-13-067-02.pdf