CVE:CVE-2022-26507
CNNVD:CNNVD-202204-3389
AT&T Labs Xmill是美国AT&T Labs实验室的一种用于高效压缩 XML 数据的新工具。
AT&T Labs 的 Compressor (XMilI) 和 decompressor (XDemill) 存在安全漏洞，攻击者利用此漏洞可能会导致在工程工作站上以提升的权限执行代码。以下产品和版本受到影响：EcoStruxure™ Control Expert（包括former Unity Pro） V15.1 HF001 之前版本、EcoStruxure™ Process Expert（包括former HDCS）V2021 之前版本、SCADAPack RemoteConnect™ for x70 所有版本。
solution:Upgrade att xmill to a higher version than 0.7,and avoid the version 0.7; Upgrade schneider-electric ecostruxure_control_expert to a higher version than 15.1,15.1,and avoid the version (,15.1),15.1; Upgrade schneider-electric ecostruxure_process_expert to a higher version than 2021,and avoid the version (,2021); Upgrade schneider-electric remoteconnect to a higher version than -