What’s Vulnerable › Vulnerabilities

CVE-2022-0221

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-13 · updated 2026-06-17
• Weakness: CWE-611

Description

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could result in information disclosure when opening a malicious solution file provided by an attacker with SCADAPack Workbench. This could be exploited to pass data from local files to a remote system controlled by an attacker. Affected Product: SCADAPack Workbench (6.6.8a and prior)

Affected products

• Schneider Electric SCADAPack Workbench: through 6.6.8a

References

• https://www.se.com/ww/en/download/document/SEVD-2022-087-01/
• https://www.se.com/ww/en/download/document/SEVD-2022-087-01/

Get alerted when CVE-2022-0221 or the next vulnerability affects your stack