CVEvulnerability
CVE-2018-10611
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-06-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to allow unauthenticated users to launch applications and support remote code execution through web services.
Affected configurations
• ge mds pulsenet (<= 3.2.1)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1 Permissions Required
- http://www.securityfocus.com/bid/104377 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02 Third Party Advisory, US Government Resource
- http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1 Permissions Required
- http://www.securityfocus.com/bid/104377 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02 Third Party Advisory, US Government Resource