CVE-2023-29498: XEE
Published Jun 13, 2023
·Updated
Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier. If a user opens a specially crafted project file, sensitive information on the system where the affected product is installed may be disclosed.
Affected Software
1 affected component
Fujielectric Frenic Rhc Loader<=1.1.0.3
Event History
Jun 13, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-29498.
2
What is the severity level of CVE-2023-29498?
The severity level of CVE-2023-29498 is medium (5.5).
3
What is the affected software of CVE-2023-29498?
The affected software of CVE-2023-29498 is Fujielectric Frenic Rhc Loader v1.1.0.3 and earlier.
4
How does the vulnerability CVE-2023-29498 occur?
The vulnerability occurs due to improper restriction of XML external entity reference (XXE).
5
How can CVE-2023-29498 be exploited?
CVE-2023-29498 can be exploited by a user opening a specially crafted project file.