CVE-2023-37200: SE Ecostruxure Opc Ua Server Expert

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.

Affected products

• SE Ecostruxure Opc Ua Server Expert: before 2.01 (fixed in 2.01); version 2.01 only

Published 2023-07-12. Last modified 2026-06-17.