Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2024-12476

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts workstation integrity and potential remote code execution on the compromised computer, when specific crafted XML file is imported in the Web Designer configuration tool.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Web Designer for BMXNOR0200H

Default version status: unaffected

  • All versionsaffected

Schneider Electric Web Designer for BMXNOE0110(H)

Default version status: unaffected

  • All versionsaffected

Schneider Electric Web Designer for BMENOC0311(C)

Default version status: unaffected

  • All Versionsaffected

Schneider Electric Web Designer for BMENOC0321(C)

Default version status: unaffected

  • All Versionsaffected

References