CVE-2012-4710 Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via...
HighCVSS 9.3
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| invensys wonderware win-xml exporter | = 1522.148.0.0 | No fix listed |
References
- ics-cert.us-cert.gov us-government-resource