CVEvulnerability

CVE-2020-12025

3.3 LOW Published 2020-07-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-611

Description

Rockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02 vulnerable to an xml external entity (XXE) vulnerability, which may allow an attacker to view hostnames or other resources from the program.

Affected configurations

• rockwellautomation studio 5000 logix designer 32.00 • rockwellautomation studio 5000 logix designer 32.01 • rockwellautomation studio 5000 logix designer 32.02

Related

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References