CVE-2018-10600

SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in certain situations on specific platforms), and denial of service attacks.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-07-24

Last modified

2024-09-16

Weaknesses

CWE-611

Affected products

• Acselerator Architect (Schweitzer Engineering Laboratories Inc.)
• Acselerator Architect (Selinc)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02