CVE-2013-2796 in CitectSCADA
요약 (영어)
Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
예약하다
2013. 04. 11.
공개
2013. 08. 09.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 64652 | Schneider Electric CitectSCADA 권한 상승 | 264 | 정의되지 않음 | 정의되지 않음 | CVE-2013-2796 |