PT-2023-22282 · Unknown · Frenic Rhc Loader

Michael Heinzl · Published 2023-06-13 · Updated 2025-01-03 · CVE-2023-29498

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FRENIC RHC Loader versions 1.1.0.3 and earlier

Description An issue exists due to improper restriction of XML external entity reference (XXE), which may lead to the disclosure of sensitive information on the system where the affected product is installed if a user opens a specially crafted project file.

Recommendations For versions 1.1.0.3 and earlier, update to a version later than 1.1.0.3 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2023-29498

Affected Products

Frenic Rhc Loader

References · 6

• https://osv.dev/vulnerability/CVE-2023-29498 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-29498 · Security Note
• https://jvn.jp/en/vu/JVNVU97809354 · Note
• https://felib.fujielectric.co.jp/download/details.htm?dataid=45829407&site=global&lang=en · Note
• https://t.me/cvenotify/106264 · Telegram Post
• https://t.me/cvenotify/52172 · Telegram Post