Description
Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack while restoring the backup.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Inductive Automation | Ignition | 8.1 – ≤ 8.1.7, All – < 7.9.21 | 7.9.21 |
Advisories 1
- ICSA-22-207-01 Inductive Automation Ignition CISA ICS & IT advisories · Aug 4, 2022