CVE-2018-10611 | BDVDB-2026-101689 Detail

GEMDS PulseNET and MDS PulseNET Enterprise

Description#

Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to allow unauthenticated users to launch applications and support remote code execution through web services.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-287 Improper Authentication

References#

http://www.securityfocus.com/bid/104377
http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1
https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02

Exploit#

No public exploit known

History#

Version 12018-06-04Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.