CVE-2024-1167 MEDIUM

CVE-2024-1167: SEW-EURODRIVE MOVITOOLS MotionStudio Improper Restriction of XML External Entity Reference

Vendor Sew-Eurodrive
Product MOVITOOLS MotionStudio
Weakness CWE-611 · XXE
Published February 1, 2024
Last update May 15, 2025
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

When SEW-EURODRIVE MOVITOOLS MotionStudio processes XML information unrestricted file access can occur.

Key dates

02Disclosure timeline

February 1, 2024 CVE published
May 15, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-3603 IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack CVE-2023-6721 Improper Restriction of XML External Entity Reference in Repox CVE-2025-7823 Jinher OA ProjectScheduleDelete.aspx xml external entity reference CVE-2024-4184 Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools CVE-2024-2826 lakernote EasyAdmin saveReportFile xml external entity reference