Description
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Wonderware Information Server Portal | 4.0 SP1, 4.5, 5.0, 5.5 | — |
Advisories 1
- ICSA-14-238-02 Schneider Electric Wonderware Vulnerabilities CISA ICS & IT advisories · Jun 6, 2025