CVE-2025-24521
External XML entity injection allows arbitrary download of files. The
score without least privilege principle violation is as calculated
below. In combination with other issues it may facilitate further
compromise of the device. Remediation in Version 6.8.0, release date:
01-Mar-25.
score without least privilege principle violation is as calculated
below. In combination with other issues it may facilitate further
compromise of the device. Remediation in Version 6.8.0, release date:
01-Mar-25.
Vendor
-
Product
-
CWE
Yayın Tarihi
2025-03-05 16:15:39
Güncelleme
2025-03-05 16:15:39
Source Identifier
ics-cert@hq.dhs.gov
KEV Date Added
-