Description
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could result in information disclosure when opening a malicious solution file provided by an attacker with SCADAPack Workbench. This could be exploited to pass data from local files to a remote system controlled by an attacker. Affected Product: SCADAPack Workbench (6.6.8a and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | SCADAPack Workbench | 6.6.8a – < and prior | and prior |
Advisories 2
- SEVD-2022-087-01 SCADAPack Workbench Schneider Electric CPCERT · Apr 11, 2023
- ICSA-22-090-01 Schneider Electric SCADAPack Workbench CISA ICS & IT advisories · Mar 31, 2022