VULNERABILITY INTELLIGENCE

CVE-2012-4710

CVSS score9.3 HIGH
EPSS probability2.08%
CISA KEVNot currently listed
Published2013-04-04
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references