Read the docs

Se

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Se records in CISA KEV

No Se vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ecostruxure Opc Ua Server Expert 1 record LOW Ecostruxure Operator Terminal Expert 1 record LOW Renf22r2mmw Firmware 1 record MEDIUM Rmnf22tb30 Firmware 1 record MEDIUM

Records

1 record in Ecostruxure Opc Ua Server Expert · all components

TI-2023-18833 CVE-2023-37200 · GHSA-mhjw-pxqp-cm9c

XML external entity injection in Schneider Electric EcoStruxure OPC UA Server Expert

Priority LOW 24

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00211 Published 2023-07-12 No fix listed CWE-611
Open these records in search →