CVE-2018-10613 | BDVDB-2026-101690 Detail

GEMDS PulseNET and MDS PulseNET Enterprise

Description#

Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-611 Improper Restriction of XML External Entity Reference

References#

http://www.securityfocus.com/bid/104377
http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1
https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02

Exploit#

No public exploit known

History#

Version 12018-06-04Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.