CVE-2018-10615
Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior host platform.
- Score
- CVSS 3.0 8.1 High
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2018-06-04
- Last modified
- 2024-09-16
- Weaknesses
- CWE-22, CWE-23
Affected products
References
- http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1
- http://www.securityfocus.com/bid/104377
- https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02
