CVE-2015-6459

概要

参考情報

• gedigitalenergy.com/app/resources.aspx · Vendor Advisory
• zerodayinitiative.com/advisories/ZDI-15-439
• ics-cert.us-cert.gov/advisories/ICSA-15-258-03 · Third Party Advisory

mds pulsenet のその他の脆弱性

• CVE-2018-10615高 8.1Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prio…
• CVE-2018-10613高 7.5Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and …
• CVE-2018-10611緊急 9.8Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to al…
• CVE-2015-6456緊急 9.0GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account, which allows remot…