CVE-2017-7907

CVE-2017-7907 is an Improper XML Parser Configuration vulnerability (XXE) affecting Schneider Electric Wonderware Historian Client 2014 R2 SP1 and earlier versions. This flaw allows an attacker to inject malicious XML, potentially leading to a denial of service or the disclosure of sensitive file contents from the server or network. Rated Medium severity (CVSS 6.6), exploitation requires local access and user interaction. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.