CVE-2022-2759

 

Published at: - 31-08-2022 06:15

Last modified: - 06-09-2022 04:21

Total changes: - 3

Description

Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions where the software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. This may allow an attacker to view sensitive documents and information on the affected host.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-03

 

Keywords

NVD

 

CVE-2022-2759

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures