No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time. This vulnerability is not exploitable remotely.
Credit: Esjay (@esj4y) (Trend Micro Zero Day Initiative)
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2024-1167 | CWE-611 Improper Restriction of XML External Entity Reference | 5.5 Medium |
When the affected product processes XML information, unrestricted file access can occur. Mitigation: SEW-EURODRIVE recommends users to create a firewall rule that prohibits outgoing TCP connection for the application "SEWManager.exe". Please refer to SEW-EURODRIVE's security advisory for further details. ↗ Mitigation: SEW-EURODRIVE recommends users update to MOVITOOLS® MotionStudio 6.70 as soon as the version is available. Mitigation: For more information, see SEW-EURODRIVE's security advisory. ↗ Affected, fixed & timelineAffected:
|
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2024-1167 | 5.5 Medium | SEW-EURODRIVE MOVITOOLS MotionStudio When SEW-EURODRIVE MOVITOOLS MotionStudio processes XML information unrestricted file access can occur. |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.