CVE-2018-10615

Description

References

• gegridsolutions.com/app/DownloadFile.aspx · Permissions Required
• securityfocus.com/bid/104377 · Third Party Advisory
• ics-cert.us-cert.gov/advisories/ICSA-18-151-02 · Third Party Advisory

mds pulsenet 的其他漏洞

• CVE-2018-10613高危 7.5Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and …
• CVE-2018-10611严重 9.8Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to al…
• CVE-2015-6459严重 10.0Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Ente…
• CVE-2015-6456严重 9.0GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account, which allows remot…