Vulnerabilities > CVE-2018-17889 - XXE vulnerability in We-Con PI Studio and PI Studio HMI
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the XMLParser that ships with Wecon PIStudio is vulnerable to a XML external entity injection attack, which may allow sensitive information disclosure.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |