PT-2018-9991 · Sel · Acselerator Architect

Publicado 2018-07-24 · Atualizado 2019-10-09 · CVE-2018-10600

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SEL AcSELerator Architect versions 2.2.24.0 and prior

Description: The issue allows unsanitized input to be passed to the XML parser, which may lead to disclosure and retrieval of arbitrary data, arbitrary code execution in certain situations on specific platforms, and denial of service attacks.

Recommendations: For SEL AcSELerator Architect versions 2.2.24.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2018-10600

Produtos afetados

Acselerator Architect

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-10600 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-10600 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02 · Nota