NVD

Id
34665  
Name
CVE-2014-7251  
Description
XML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation FAST/TOOLS before R9.05-SP2 allows local users to cause a denial of service (CPU or network traffic consumption) or read arbitrary files via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
3.2  
Severity
Low  
CVSS Base Score
3.2  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:P/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-12-06  
Modified Date
2014-12-08  
Seq
2014-7251  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
178685 34665 CVE-2014-7251 JVN#54775800  View
178686 34665 CVE-2014-7251 JVNDB-2014-000141  View
178687 34665 CVE-2014-7251 http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0004E.pdf  View
178688 34665 CVE-2014-7251 fast-tools-cve20147251-info-disc(99018)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12114 JVNDB-2014-000141 FAST/TOOLS における XML 外部実体参照処理の脆弱性 横河電機株式会社が提供する FAST/TOOLS には、XML 外部実体参照処理の脆弱性 (XXE) (CWE-611) が存在します。 CVE-2014-7251 74544 CVE-2014-7251 34665 2.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000141.html 2014-11-28 2014-12-10 View