Summary
Successful exploitation of this vulnerability could allow an unauthenticated attacker to craft a malicious file, which when parsed, could lead to some information disclosure of hostnames or other resources from the program.
Vulnerabilities 1
-
Unscored —
Rockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02 vulnerable to an xml external entity (X…
Revision history
-
#1
ICSA-20-191-02 Rockwell Automation Studio 5000 Logix Designer
References
-
ICS Advisory ICSA-20-191-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-191-02
-
Recommended Practices
https://www.us-cert.gov/ncas/tips/ST04-014
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B