Timur Yunusov

**Name of the Vulnerable Software and Affected Versions** Huawei MBB product E3272s versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00 **Description** The issue allows an attacker to send a malicious packet to the Common Gateway Interface (CGI) of a target device, causing it to fail while setting the port attribute. This results in a Denial of Service (DoS) attack. **Recommendations** For versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00, update to version E3272s-153TCPU-V200R002B491D09SP00C00 or later to resolve the issue. As a temporary workaround, consider restricting access to the CGI to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Advantech WebAccess versions prior to 8.1 **Description** The issue allows remote authenticated users to execute arbitrary SQL commands. This is due to insufficient protection of the SQL query structure during authentication, which enables SQL code injection. Exploitation of this issue may allow a remote attacker to execute arbitrary SQL commands and modify web server settings, accounts, and projects. **Recommendations** For Advantech WebAccess versions prior to 8.1, update to version 8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the SQL query structure to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Yokogawa Electric Corporation FAST/TOOLS versions prior to R9.05-SP2 **Description** The issue is related to an XML external entity (XXE) vulnerability in the WebHMI server, which can be exploited by local users to cause a denial of service, resulting in CPU or network traffic consumption, or to read arbitrary files. **Recommendations** For versions prior to R9.05-SP2, update to version R9.05-SP2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Schneider Electric Wonderware Information Server (WIS) Portal versions 4.0 SP1 through 5.5 **Description** The issue allows remote attackers to execute arbitrary SQL commands. **Recommendations** For versions 4.0 SP1 through 5.5, update to a version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Wonderware Information Server (WIS) Portal versions 4.0 SP1 through 5.5 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the web application. **Recommendations** For versions 4.0 SP1 through 5.5, update to a version that includes a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Oracle Database Server versions 11.1.0.7, 11.2.0.2, 11.2.0.3, and 12.1.0.1 **Description** The issue affects the confidentiality and availability of the system, but details about the vectors used for exploitation are not specified. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** For Oracle Database Server version 11.1.0.7, update to a version that includes the fix for this issue. For Oracle Database Server version 11.2.0.2, update to a version that includes the fix for this issue. For Oracle Database Server version 11.2.0.3, update to a version that includes the fix for this issue. For Oracle Database Server version 12.1.0.1, update to a version that includes the fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Invensys Wonderware InTouch HMI versions 2012 R2 and earlier **Description** The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service through CPU and memory consumption. This is related to an XML External Entity (XXE) issue, where an XML document containing an external entity declaration in conjunction with an entity reference can be used for exploitation. **Recommendations** For versions 2012 R2 and earlier, as a temporary workaround, consider restricting access to XML documents and external entity declarations until a patch is available. Additionally, restrict HTTP requests to intranet servers to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** librsvg2 versions 2.26.0 GNOME libsvg versions prior to 2.39.0 **Description** The issue allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be carried out remotely. **Recommendations** For librsvg2 version 2.26.0, update to a version that includes the fix for this issue. For GNOME libsvg versions prior to 2.39.0, update to version 2.39.0 or later. As a temporary workaround, consider restricting the use of XML external entities in librsvg2 until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel versions 2003 SP3, 2007 SP3, and 2010 SP1 and SP2 Excel Viewer Microsoft Office Compatibility Pack version SP3 **Description** An issue exists in the way Microsoft Excel parses specially crafted XML files, allowing remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference. This is related to an XML External Entity (XXE) issue, which is an information disclosure vulnerability. **Recommendations** For Microsoft Excel versions 2003 SP3, 2007 SP3, and 2010 SP1 and SP2, consider disabling the parsing of external entities in XML files until a patch is available. For Excel Viewer, restrict access to specially crafted XML files to minimize the risk of exploitation. For Microsoft Office Compatibility Pack version SP3, avoid using the affected XML parsing functionality until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft FrontPage version 2003 SP3 **Description** The issue allows remote attackers to obtain sensitive information via crafted XML data in a FrontPage document. This is due to the improper parsing of DTDs. **Recommendations** For Microsoft FrontPage 2003 SP3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office versions 2003 SP3 through 2007 SP3 Word versions 2003 SP3 through 2007 SP3 Word Viewer (affected versions not specified) **Description** The issue is related to an XML External Entity (XXE) problem, where an XML document containing an external entity declaration in conjunction with an entity reference can be used to read arbitrary files. This occurs because of the way Microsoft Word parses specially crafted XML files containing external entities, leading to an information disclosure vulnerability. **Recommendations** For Microsoft Office versions 2003 SP3 through 2007 SP3, consider disabling the parsing of external entities in XML files as a temporary workaround until a patch is available. For Word versions 2003 SP3 through 2007 SP3, restrict access to specially crafted XML files to minimize the risk of exploitation. For Word Viewer, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Schneider Electric Vijeo Citect versions 7.20 and earlier Schneider Electric CitectSCADA versions 7.20 and earlier Schneider Electric PowerLogic SCADA versions 7.20 and earlier **Description** The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. The vulnerability is also associated with insufficient access restrictions to certain functions, which can be exploited by an attacker to achieve similar malicious outcomes. **Recommendations** For Schneider Electric Vijeo Citect versions 7.20 and earlier, consider disabling the XML parsing functionality until a patch is available. For Schneider Electric CitectSCADA versions 7.20 and earlier, restrict access to the affected functions to minimize the risk of exploitation. For Schneider Electric PowerLogic SCADA versions 7.20 and earlier, avoid using the vulnerable XML document processing feature until the issue is resolved. As a temporary workaround, consider implementing additional access controls to limit the potential impact of the vulnerability.

**Name of the Vulnerable Software and Affected Versions** Siemens WinCC (TIA Portal) versions 11 through 12 before 12 SP1 **Description** A cross-site request forgery (CSRF) issue exists due to improper configuration of SIMATIC HMI panels by the WinCC product, allowing remote attackers to hijack the authentication of victims. **Recommendations** For versions 11 through 12 before 12 SP1, update to version 12 SP1 or later to resolve the issue. As a temporary workaround, consider restricting access to the SIMATIC HMI panels to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Siemens WinCC (TIA Portal) versions 11 and 12 before 12 SP1 **Description** The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels. This is due to an open redirect vulnerability in the affected software. **Recommendations** For versions 11 and 12 before 12 SP1, update to version 12 SP1 or later to resolve the issue. As a temporary workaround, consider restricting access to the SIMATIC HMI panels to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Siemens WinCC versions prior to 7.2 Update 1 **Description** The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. This is related to a SQL injection vulnerability in the login screen of the Web Navigator in Siemens WinCC. **Recommendations** For versions prior to 7.2 Update 1, update to version 7.2 Update 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the login screen of the Web Navigator to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft Visio versions 2003 SP3 through 2010 SP1 **Description** An information disclosure issue exists due to the way Microsoft Visio handles specially crafted XML files containing external entities. This allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference. **Recommendations** For Microsoft Visio versions 2003 SP3 through 2010 SP1, consider restricting the parsing of external entities in XML files to minimize the risk of information disclosure until a patch is available. As a temporary workaround, avoid using Microsoft Visio to open XML files from untrusted sources.

**Name of the Vulnerable Software and Affected Versions** Invensys Wonderware Information Server (WIS) versions 4.0 SP1 through 5.0 **Description** The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. **Recommendations** For versions 4.0 SP1 through 5.0, as a temporary workaround, consider restricting access to XML documents or disabling the processing of external entities until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Invensys Wonderware Win-XML Exporter version 1522.148.0.0 **Description** The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service through CPU and memory consumption. This is achieved via an XML external entity declaration in conjunction with an entity reference. **Recommendations** For Invensys Wonderware Win-XML Exporter version 1522.148.0.0, consider disabling XML external entity processing as a temporary workaround until a patch is available. Restrict access to sensitive files and intranet servers to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Siemens WinCC versions prior to 7.2 SIMATIC PCS7 versions prior to 8.0 SP1 **Description** The issue allows remote attackers to obtain sensitive information or cause a denial of service by using a crafted project file. **Recommendations** For Siemens WinCC versions prior to 7.2, update to version 7.2 or later. For SIMATIC PCS7 versions prior to 8.0 SP1, update to version 8.0 SP1 or later.

**Name of the Vulnerable Software and Affected Versions** IBM SPSS Modeler versions 14.0 through 14.2 FP3 IBM SPSS Modeler version 15.0 before FP2 **Description** The issue allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service due to CPU and memory consumption. This is achieved via an XML external entity declaration in conjunction with an entity reference. **Recommendations** For IBM SPSS Modeler versions 14.0 through 14.2 FP3, update to a version after FP3 to resolve the issue. For IBM SPSS Modeler version 15.0 before FP2, update to FP2 or later to resolve the issue.