CVE-2018-15362

Description

References

• securityfocus.com/bid/106133 · Third Party Advisory
• ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/07/klcert-18-025-general-electric-proficy-gds-xml-external-entity-xxe · Mitigation
• ics-cert.us-cert.gov/advisories/ICSA-18-340-01 · Mitigation

Autres vulnérabilités de cimplicity

• CVE-2023-4487ÉLEVÉE 7.8 GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the…
• CVE-2022-3092ÉLEVÉE 7.8GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code.…
• CVE-2022-3084ÉLEVÉE 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionT…
• CVE-2022-2952ÉLEVÉE 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionCon…
• CVE-2022-2948ÉLEVÉE 7.8GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary cod…