Summary
Successful exploitation of this vulnerability could allow an attacker to obtain file contents.
Vulnerabilities 1
-
High 7.6
Inductive Automation Ignition
Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack while restoring the backup.
Revision history
-
#2
Inductive Automation Ignition (Update A)
-
#1
Inductive Automation Ignition (Update A)
References
-
ICS Advisory ICSA-22-207-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-207-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-22-207-01
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf