Description
An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Emerson Liebert SiteScan 6.5, and prior | Emerson Liebert SiteScan 6.5, and prior | — |
Advisories 1
- ICSA-16-334-01 Emerson Liebert SiteScan XML External Entity Vulnerability CISA ICS & IT advisories · Jun 5, 2025