7.1
CVSSv3

CVE-2020-14478

Published: 24/02/2022 Updated: 04/03/2022
CVSS v2 Base Score: 5.6 | Impact Score: 7.8 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.1 | Impact Score: 5.2 | Exploitability Score: 1.8
VMScore: 498
Vector: AV:L/AC:L/Au:N/C:C/I:N/A:P

Vulnerability Summary

A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a denial-of-service condition and allow the malicious user to arbitrarily read any local file via system-level services.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

rockwellautomation factorytalk services platform