CVE-2018-10613

Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
icscertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
gemds_pulsenet
𝑥
≤ 3.2.1
gemds_pulsenet
𝑥
≤ 3.2.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1
http://www.securityfocus.com/bid/104377
https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02
http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1
http://www.securityfocus.com/bid/104377
https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02