Summary
Schneider Electric is aware of a vulnerability in its OPC Factory Server (OFS). OPC Factory Server (OFS) is a standards compliant server application allowing open, real-time access to Schneider Electric automation and electrical distribution devices connected to Ethernet networks or fieldbuses.
Failure to apply the remediation provided below may risk exposure of sensitive information, which could cause unauthorized read access to the file system running the OPC Factory Server (OFS).
Vulnerabilities 1
-
Medium 5.0
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized rea…
Revision history
-
#1.0.0
Original Release
References
-
OPC Factory Server - SEVD-2023-129-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-129-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-129-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/