Vulnerability Description
Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions where the software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. This may allow an attacker to view sensitive documents and information on the affected host.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Deltaww | Delta Robot Automation Studio | < 1.13.20 |
Related Weaknesses (CWE)
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-03PatchThird Party AdvisoryUS Government Resource
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-03PatchThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2022-2759?
CVE-2022-2759 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions where the software processes an XML document that can contain XML entities with U...
How severe is CVE-2022-2759?
CVE-2022-2759 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-2759?
Check the references section above for vendor advisories and patch information. Affected products include: Deltaww Delta Robot Automation Studio.