A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a denial-of-service condition and allow the attacker to arbitrarily read any local file via system-level services.
2022-02-24T19:15:08.760
2025-04-17T19:15:49.883
Modified
CVSSv3.1: 7.1 (HIGH)
AV:L/AC:L/Au:N/C:C/I:N/A:P
3.9
7.8
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | rockwellautomation | factorytalk_services_platform | ≤ 6.11.00 | Yes |