CVE-2014-7251 - CERT CVE
ID CVE-2014-7251
Sažetak XML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation FAST/TOOLS before R9.05-SP2 allows local users to cause a denial of service (CPU or network traffic consumption) or read arbitrary files via unspecified vectors.
Reference
CVSS
Base: 3.2
Impact: 4.9
Exploitability:3.1
Pristup
VektorSloženostAutentikacija
LOCAL LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE PARTIAL
CVSS vektor AV:L/AC:L/Au:S/C:P/I:N/A:P
Zadnje važnije ažuriranje 08-09-2017 - 01:29
Objavljeno 06-12-2014 - 15:59