CVE-2022-0221: Schneider Electric Scadapack Workbench

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could result in information disclosure when opening a malicious solution file provided by an attacker with SCADAPack Workbench. This could be exploited to pass data from local files to a remote system controlled by an attacker. Affected Product: SCADAPack Workbench (6.6.8a and prior)

Affected products

• Schneider Electric Scadapack Workbench: up to and including 6.6.8a

Published 2022-04-13. Last modified 2026-06-17.