Most recent entries from all

bdu:2023-00682

EUVD-2026-10790

fkie_cve-2022-0221

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could result in information disclosure when opening a malicious solution file provided by an attacker with SCADAPack Workbench. This could be exploited to pass data from local files to a remote system controlled by an attacker. Affected Product: SCADAPack Workbench (6.6.8a and prior)

GHSA-g89x-g6h5-52vm

gsd-2022-0221

ICSA-22-090-01 — Schneider Electric SCADAPack Workbench

An improper restriction of XML external entity reference vulnerability exists that could result in information disclosure when opening a malicious solution file provided by an attacker with SCADAPack Workbench. This could be exploited to pass data from local files to a remote system controlled by an attacker.CVE-2022-0221 has been assigned to this vulnerability. A CVSS v3 base score of 5.5 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).

SEVD-2022-087-01 — SCADAPack Workbench

Schneider Electric is aware of a vulnerability in its SCADAPack Workbench product. SCADAPack Workbench is a programming and configuration tool for SCADAPack 300E RTUs and SCADAPack 500E RTUs. Failure to apply the mitigations provided below may risk information disclosure, which could result from exfiltration of data from local files to a remote system controlled by an attacker. April 2023 Update: A remediation for the SCADAPack Workbench is available for download (page 1).