Description
Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.
Advisories 1
- ICSA-13-067-02 Invensys Wonderware Win-XML Exporter Improper Input Validation Vulnerability CISA ICS & IT advisories · Jun 6, 2025