CVE-2014-7251

https://notcve.org/view.php?id=CVE-2014-7251

06 Dec 2014 — XML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation FAST/TOOLS before R9.05-SP2 allows local users to cause a denial of service (CPU or network traffic consumption) or read arbitrary files via unspecified vectors. Vulnerabilidad de entidad externa XML (XXE) en el servidor WebHMI en Yokogawa Electric Corporation FAST/TOOLS anterior a R9.05-SP2 permite a usuarios locales causar una denegación de servicio (consumo de CPU o trafico de red) o leer ficheros arbitrarios a ... • http://jvn.jp/en/jp/JVN54775800/index.html • CWE-20: Improper Input Validation •