CVE-2012-4710: Input Validation
Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4710?
CVE-2012-4710 is considered a medium to high severity vulnerability due to its potential for remote exploitation and impact on system resources.
How do I fix CVE-2012-4710?
To remediate CVE-2012-4710, users should upgrade to a patched version of Invensys Wonderware Win-XML Exporter that addresses this vulnerability.
What types of attacks are possible with CVE-2012-4710?
CVE-2012-4710 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service.
Which software versions are affected by CVE-2012-4710?
CVE-2012-4710 specifically affects Invensys Wonderware Win-XML Exporter version 1522.148.0.0.
What can be the impact of exploiting CVE-2012-4710?
Exploiting CVE-2012-4710 can lead to unauthorized access to files, disruption of service, and increased CPU and memory consumption.