CVE-2023-2161 (published 2023-05-16T04:31:26.482Z)

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that
could cause unauthorized read access to the file system when a malicious configuration file is
loaded on to the software by a local user. 
Affected products: Vendor: Schneider Electric
Product: OPC Factory Server (OFS)
Versions: Versions prior to V3.63SP2