CVE-2018-15362

概要

参考情報

• securityfocus.com/bid/106133 · Third Party Advisory
• ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/07/klcert-18-025-general-electric-proficy-gds-xml-external-entity-xxe · Mitigation
• ics-cert.us-cert.gov/advisories/ICSA-18-340-01 · Mitigation

cimplicity のその他の脆弱性

• CVE-2023-4487高 7.8 GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the…
• CVE-2022-3092高 7.8GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code.…
• CVE-2022-3084高 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionT…
• CVE-2022-2952高 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionCon…
• CVE-2022-2948高 7.8GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary cod…