PT-2018-10005 · Ge · Mds Pulsenet Enterprise+1

Rgod · Published 2018-06-04 · Updated 2019-10-09 · CVE-2018-10615

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior

Description The issue allows for directory traversal, which may result in the exfiltration or deletion of files on the host platform.

Recommendations For GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior, update to a version later than 3.2.1 to resolve the issue.

Fix

Relative Path Traversal

Path traversal

Weakness Enumeration

CWE-23

CWE-22

Related Identifiers

CVE-2018-10615

ZDI-18-546

Affected Products

Ge Mds Pulsenet

Mds Pulsenet Enterprise

References · 6

• https://zerodayinitiative.com/advisories/ZDI-18-546 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-10615 · Security Note
• https://osv.dev/vulnerability/CVE-2018-10615 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02 · Note
• http://gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1 · Note
• http://securityfocus.com/bid/104377 · Note