Description
When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker could exploit this to pass data from local files to a remote web server, leading to a loss of confidentiality.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Rockwell Automation Connected Component Workbench
All to < 12affected
Rockwell Automation ISaGRAF
All to < 6.6.9affected
Rockwell Automation Safety Instrumented Systems Workstation
All to < 1.1affected