What is CVE-2018-7783?

CVE-2018-7783 is a high-severity vulnerability in Schneider-electric Somachine_basic, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 7.5/10. Published 2018-07-03.

How severe is CVE-2018-7783?

High severity. CVSS v3 base score is 7.5 out of 10.

XXE in Schneider-electric Somachine_basic

CVE-2018-7783

Schneider Electric SoMachine Basic prior to v1.6 SP1 suffers from an XML External Entity (XXE) vulnerability using the DTD parameter entities technique resulting in disclosure and retrieval of arbitrary data on the affected node via out-of…

Vulnerability class: XXE (XML External Entity)

EPSS: 0.016 (72.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Schneider-electric Somachine_basic
Schneider Electric Se Somachine Basic — versions SoMachine Basic prior to v1.6 SP1

Weakness classification (CWE)

CWE-611 — Improper Restriction of XML External Entity Reference (XXE)

References

cybersecurity@se.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-7783?: CVE-2018-7783 is a high-severity vulnerability in Schneider-electric Somachine_basic, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 7.5/10. Published 2018-07-03.
How severe is CVE-2018-7783?: High severity. CVSS v3 base score is 7.5 out of 10.