Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Invensys Wonderware Win-XML Exporter XML外部实体信息泄露漏洞
Vulnerability Description
WonderWare是一家工业自动化和信息软件解决方案的供应商。 Invensys Wonderware Win-XML Exporter 1522.148.0.0中存在漏洞。通过与实体进行协调的XML外部实体声明，远程攻击者可利用该漏洞读取任意文件，向内网服务器发送HTTP请求，或造成拒绝服务（CPU及内存耗尽）。
CVSS Information
N/A
Vulnerability Type
N/A