Siemens OPC UA Modeling Editor (SiOME) XML External Entity Injection Vulnerability

Siemens OPC UA Modeling Editor (SiOME) is a free tool to create OPC UA information models or map existing companion specifications. An XML external entity injection vulnerability exists in Siemens OPC UA Modeling Editor (SiOME), which can be exploited by an attacker to interfere with the application’s processing of XML data and read arbitrary files on the system.