Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Schneider Electric SoMachine Basic prior to v1.6 SP1 suffers from an XML External Entity (XXE) vulnerability using the DTD parameter entities technique resulting in disclosure and retrieval of arbitrary data on the affected node via out-of-band (OOB) attack. The vulnerability is triggered when input passed to the xml parser is not sanitized while parsing the xml project/template file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Schneider Electric SoMachine Basic 安全漏洞
Vulnerability Description
Schneider Electric SoMachine Basic是法国施耐德电气（Schneider Electric）公司的一款用于在控制平台上对元器件进行编程、调试的软件。 Schneider Electric SoMachine Basic 1.6 SP1版本中存在XML外部实体注入漏洞，该漏洞源于程序没有过滤传入到xml解析器的输入。攻击者可利用该漏洞泄露并检索受影响节点上的任意数据。
CVSS Information
N/A
Vulnerability Type
N/A