CVE-2023-2161

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized read access to the file system when a malicious configuration file is loaded on to the software by a local user. 

Score

CVSS 3.1 5.5 Medium

Status

Modified - cybersecurity@se.com

Published

2023-05-16

Last modified

2025-01-22

Weaknesses

CWE-611

Affected products

• Opc Factory Server (Schneider-electric)
• Opc Factory Server Ofs (Schneider Electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-129-01&p_enDocType=Security+and+Safety+Notice&p_File_…