Multiple Keyence products vulnerable to improper restriction of XML external entity reference

The vulnerability involves improper restriction of XML external entity (XXE) references in Keyence's XG VisionTerminal and XG-X VisionTerminal products. XXE vulnerabilities occur when XML parsers process external entities without proper validation, potentially allowing attackers to access unauthorized data or cause denial of service. The provided information does not specify affected versions or remediation status, nor does it indicate active exploitation.

If exploited, this vulnerability could allow an attacker to manipulate XML processing in the affected devices, potentially leading to unauthorized data access or disruption of service. However, no active exploitation has been reported, and the exact impact depends on the attacker's ability to interact with the vulnerable XML processing components.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or mitigation is provided by Keyence, users should monitor vendor communications for updates. No specific mitigation steps are provided in the available information.