CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) contains an improper restriction of XML external entity reference (XXE) vulnerability. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Designer is installed may be disclosed.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/vu/JVNVU98683567/ | Third Party Advisory |
| https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-011_en.pdf | Vendor Advisory |
Configurations
History
01 Nov 2023, 16:56
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-611 | |
| CPE | cpe:2.3:a:omrom:cx-designer:*:*:*:*:*:*:*:* | |
| First Time |
Omrom cx-designer
Omrom |
|
| References | (MISC) https://jvn.jp/en/vu/JVNVU98683567/ - Third Party Advisory | |
| References | (MISC) https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-011_en.pdf - Vendor Advisory |
23 Oct 2023, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-23 05:15
Updated : 2023-12-10 15:14
NVD link : CVE-2023-43624
Mitre link : CVE-2023-43624
CVE.ORG link : CVE-2023-43624
JSON object : View
Products Affected
omrom
- cx-designer
CWE
CWE-611
Improper Restriction of XML External Entity Reference