Description
A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8). Affected products suffer from a XML external entity (XXE) injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary files in the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Siemens OPC UA Modelling Editor (SiOME) | All versions < V2.8 | — |
Advisories 2
- ICSA-23-320-07 Siemens OPC UA Modeling Editor (SiOME) CISA ICS & IT advisories · Nov 14, 2023
- SSA-197270 SSA-197270: Information Disclosure Vulnerability in Siemens OPC UA Modeling Editor (SiOME) Siemens ProductCERT · Nov 14, 2023