VDB
CVE-2023-2161
CVE-2023-2161
PUBLISHED
CVSS 5 MEDIUM
Reported by schneider · Published May 16, 2023
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized read access to the file system when a malicious configuration file is loaded on to the software by a local user.
Risk Scores
CVSS 3.1
5
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | OPC Factory Server (OFS) | Versions prior to V3.63SP2 |
| Schneider Electric | OPC Factory Server (OFS) | 3.63 |
Timeline
- May 9, 2023 CVE Published
- May 16, 2023 EPSS Score
- Jun 22, 2023 EPSS Score
- Jul 29, 2023 EPSS Score
- Sep 4, 2023 EPSS Score
- Oct 11, 2023 EPSS Score
- Nov 17, 2023 EPSS Score
- Dec 24, 2023 EPSS Score
- Jan 30, 2024 EPSS Score
- Mar 6, 2024 EPSS Score
- Apr 12, 2024 EPSS Score
- May 19, 2024 EPSS Score