CVE-2018-10608

SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited when the AcSELerator Architect FTP client connects to a malicious FTP server, which may cause denial of service via 100% CPU utilization. Restart of the application is required.

Score

CVSS 3.0 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-07-24

Last modified

2024-09-16

Weaknesses

CWE-400

Affected products

• Acselerator Architect (Schweitzer Engineering Laboratories Inc.)
• Acselerator Architect (Selinc)

References

• http://packetstormsecurity.com/files/152951/SEL-AcSELerator-Architect-2.2.24-Denial-Of-Service.html
• https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02