Delta Electronics EIP Builder XML External Entity Processing Information Disclosure Vulnerability

A file parsing vulnerability allowing XML external entity (XXE) processing has been identified in Delta Electronics EIP Builder version 1.11 and prior. This vulnerability could lead to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in improper restriction of XML external entity references, allowing for potential information disclosure.

Remediation

Users are advised to download and update to version 1.12 or later. For version 1.12 or later, visit the Delta Download Center.