Not rated

CVE-2018-10613 Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform…

Description

Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior.

Affected products and versions

Product	Affected versions	Fixed in
MDS PulseNET and MDS PulseNET Enterprise	Versions not published

The 3 CVEs of MDS PulseNET and MDS PulseNET Enterprise →

CVE-2018-10615 Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise… Not rated CVE-2018-10611 Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior… Not rated

Do you use MDS PulseNET and MDS PulseNET Enterprise?

Track this CVE Watch MDS PulseNET and MDS PulseNET Enterprise Check my SBOMs

www.cveye.io/en/cve/CVE-2018-10613

Timeline

Published June 4, 2018
Last modified September 16, 2024

References

104377 www.securityfocus.com
www.gegridsolutions.com www.gegridsolutions.com
ics-cert.us-cert.gov ics-cert.us-cert.gov

Track this CVE

CVE-2018-10613 Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform…

Description

Affected products and versions

Other CVEs of MDS PulseNET and MDS PulseNET Enterprise