CVE-2018-10613

Опубликовано: 04 июн. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior.

Ссылки

http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1
Permissions Required
http://www.securityfocus.com/bid/104377
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02
Third Party Advisory
US Government Resource
http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1
Permissions Required
http://www.securityfocus.com/bid/104377
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ge:mds_pulsenet:*:*:*:*:*:*:*:*

Версия до 3.2.1 (включая)

Конфигурация 2

cpe:2.3:a:ge:mds_pulsenet:*:*:*:*:enterprise:*:*:*

Версия до 3.2.1 (включая)

EPSS

Процентиль: 76%

0.00961

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

GHSA-vpj9-g8wm-99v5