CVE-2016-8348
CriticalSummary
An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.
Risk Assessment
This vulnerability may lead to serious security breaches, including unauthorized access to data and execution of malicious code on the server.
Recommendation
It is recommended to update to the latest version of the application and strengthen the configuration of the XML parser to minimize the risk of XXE attacks.
Original NVD description (English source)
An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.