CVE-2022-0221

Name of the Vulnerable Software and Affected Versions SCADAPack Workbench versions 6.6.8a and prior

Description A vulnerability exists that could result in information disclosure when opening a malicious solution file provided by an attacker with SCADAPack Workbench. This could be exploited to pass data from local files to a remote system controlled by an attacker.

Recommendations For SCADAPack Workbench versions 6.6.8a and prior, consider disabling the XML external entity reference functionality until a patch is available to prevent information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.