CVE-2024-12298

Vulnerability Report on Improper Restriction of XML External Entity Reference in NB-Designer

State: Published
Severity: 5.5 Medium
Published: Jan 14, 2025
Updated: Jan 14, 2025
Reserved: Dec 6, 2024

Description

We found a vulnerability Improper Restriction of XML External Entity Reference (CWE-611) in NB-series NX-Designer. Attackers may be able to abuse this vulnerability to disclose confidential data on a computer.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	OMRON

Weaknesses

CWE-611 Improper Restriction of XML External Entity Reference

Affected Products

Product	Versions
Programable Terminals NB-DesignerOMRON Corporation	Ver.1.63 or lowerAffected

References

https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-002_en.pdf
https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-002_ja.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.