VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Jul 12, 2023· Updated Jun 17, 2026

CVE-2023-37200

CVE-2023-37200

Description

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.

Affected products

4
  • Schneider Electric/SEVD-2023-192-02llm-create
  • Se/Ecostruxure Opc Ua Server Expert2 versions
    cpe:2.3:a:se:ecostruxure_opc_ua_server_expert:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:se:ecostruxure_opc_ua_server_expert:*:*:*:*:*:*:*:*range: <2.01
    • cpe:2.3:a:se:ecostruxure_opc_ua_server_expert:2.01:-:*:*:*:*:*:*
  • Schneider Electric/EcoStruxure OPC UA Server Expertv5
    Range: Versions prior to SV2.01 SP2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.