medium5.5
CVE-2022-1018
When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within …
Impact
When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker could exploit this to pass data from local files to a remote web server, leading to a loss of confidentiality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Connected Components Workbench | through 12.0 |
| Rockwellautomation | Isagraf | through 6.6.9 |
| Rockwellautomation | Safety Instrumented Systems Workstation | through 1.1 |