Description

expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-611

Affected software

Vendor	Product	Versions
—	—	< 2.4.0
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.0, < V3.1.5

References

http://openwall.com/lists/oss-security/2013/02/22/3Exploit, Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Oct/61Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Oct/62Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Oct/63Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/33Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/34Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/35Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/38Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/39Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/40Mailing List, Third Party Advisory
http://securitytracker.com/id?1028213Third Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2013/04/12/6Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/10/07/4Mailing List, Third Party Advisory
http://www.osvdb.org/90634Broken Link
http://www.securityfocus.com/bid/58233Broken Link, Third Party Advisory, VDB Entry
https://github.com/libexpat/libexpat/blob/R_2_4_1/expat/Changes
https://lists.apache.org/thread.html/r41eca5f4f09e74436cbb05dec450fc2bef37b5d3e966aa7cc5fada6d%40%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/rfb2c193360436e230b85547e85a41bea0916916f96c501f5b6fc4702%40%3Cusers.openoffice.apache.org%3E
https://security.gentoo.org/glsa/201701-21Third Party Advisory
https://support.apple.com/kb/HT212804Third Party Advisory
https://support.apple.com/kb/HT212805Third Party Advisory
https://support.apple.com/kb/HT212807Third Party Advisory
https://support.apple.com/kb/HT212814Third Party Advisory
https://support.apple.com/kb/HT212815Third Party Advisory
https://support.apple.com/kb/HT212819Third Party Advisory
http://openwall.com/lists/oss-security/2013/02/22/3Exploit, Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Oct/61Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Oct/62Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Oct/63Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/33Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/34Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/35Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/38Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/39Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/40Mailing List, Third Party Advisory
http://securitytracker.com/id?1028213Third Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2013/04/12/6Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/10/07/4Mailing List, Third Party Advisory
http://www.osvdb.org/90634Broken Link
http://www.securityfocus.com/bid/58233Broken Link, Third Party Advisory, VDB Entry
https://lists.apache.org/thread.html/r41eca5f4f09e74436cbb05dec450fc2bef37b5d3e966aa7cc5fada6d%40%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/rfb2c193360436e230b85547e85a41bea0916916f96c501f5b6fc4702%40%3Cusers.openoffice.apache.org%3E
https://security.gentoo.org/glsa/201701-21Third Party Advisory
https://support.apple.com/kb/HT212804Third Party Advisory
https://support.apple.com/kb/HT212805Third Party Advisory
https://support.apple.com/kb/HT212807Third Party Advisory
https://support.apple.com/kb/HT212814Third Party Advisory
https://support.apple.com/kb/HT212815Third Party Advisory
https://support.apple.com/kb/HT212819Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Timeline

Published: Jan 21, 2014
Last modified: Oct 14, 2026
NVD status: Modified

CVE-2013-0340