CVE-2018-10615 | BDVDB-2026-101691 Detail

GEMDS PulseNET and MDS PulseNET Enterprise

Description#

Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior host platform.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-23 Relative path traversal CWE-23

References#

http://www.securityfocus.com/bid/104377
http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1
https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02

Exploit#

No public exploit known

History#

Version 12018-06-04Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.