high7.5
CVE-2023-46590
A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8).
Impact
A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8). Affected products suffer from a XML external entity (XXE) injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary files in the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Siemens Opc Ua Modeling Editor | before 2.8 |