Description
XG VisionTerminal, XG-X VisionTerminal, LJ Series Terminal-Software and WI Series Terminal-Software provided by Keyence Corporation improperly restrict XML external entity references. If a user opens a specially crafted setting file, the sensitive information stored in the system where the affected product is installed may be disclosed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Keyence | XG-X VisionTerminal | ≤ Ver.3.6.0000 | — |
| Keyence | XG VisionTerminal | ≤ Ver.5.5.0010 | — |
| Keyence | LJ Series Terminal-Software | ≤ Ver.2.4.0000 | — |
| Keyence | WI Series Terminal-Software | ≤ Ver.1.1.0000 | — |