CVE-2015-6459

CRÍTICO 10.0CVE-2015-6459 · Published 18/09/2015 · updated 17/06/2026

En resumen

CVE-2015-6459 es una vulnerabilidad CRÍTICO (CVSS 10.0) que afecta a mds pulsenet (ge).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.1%, mayor que el 87.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
mds pulsenet ge	`≤ 3.1.3`	No fix yet

Description

Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 allows remote attackers to read or delete arbitrary files via a full pathname.

References

gedigitalenergy.com/app/resources.aspx · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-15-439
ics-cert.us-cert.gov/advisories/ICSA-15-258-03 · Third Party Advisory

Más vulnerabilidades de mds pulsenet

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free