Vulnerabilities for Mds pulsenet (...)

Vulnerabilities for 'Mds pulsenet'

2018-06-04

CVE-2018-10615

CWE-22

Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior host platform.

CVE-2018-10613

CWE-611

Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior.

CVE-2018-10611

CWE-287

Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to allow unauthenticated users to launch applications and support remote code execution through web services.

2015-09-18

CVE-2015-6459

Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 allows remote attackers to read or delete arbitrary files via a full pathname.

CVE-2015-6456

GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account, which allows remote attackers to obtain administrative access, and consequently execute arbitrary code, by leveraging knowledge of the password.

>>> Vendor: GE 81 Products

Communicator

Cimplicity

IFIX

Intelligent platforms proficy historian

Intelligent platforms proficy plant applications

Intelligent platforms proficy real-time information porta

Intelligent platforms proficy hmi%2Fscada ifix

Intelligent platforms proficy batch execution

Intelligent platforms si7 i%2Fo driver

Intelligent platforms proficy pulse

Intelligent platforms proficy hmi/scada ifix

Intelligent platforms si7 i/o driver

Intelligent platforms proficy real-time information portal

Intelligent platforms proficy hmi/scada cimplicity

Intelligent platforms proficy process systems with cimplicity

Intelligent platforms proficy process systems

Intelligent platforms proficy dnp3 i/o driver

Intelligent platforms proficy hmi%2fscada cimplicity

Multilink ml1200 firmware

Multilink ml1600 firmware

Multilink ml2400 firmware

Multilink ml3000 firmware

Multilink ml3100 firmware

Multilink ml800 firmware

Multilink ml810 firmware

12400 level transmitter device type manager

Svi ii ap positioner device type manager

Vector device type manager

Hydran m2

Healtcare millennium mg firmware

Healtcare millennium myosight firmware

Healtcare millennium nc firmware

Healthcare millennium mg firmware

Healthcare millennium myosight firmware

Healthcare millennium nc firmware

Mds pulsenet

Ups snmp web adapter firmware

Snmp web adapter firmware

Multilink firmware

Bently nevada 3500/22m serial firmware

Bently nevada 3500/22m usb firmware

Multilin sr 489 generator protection relay firmware

Multilin urplus c90 firmware

Multilin urplus d90 firmware

Multilin sr 745 transformer protection relay firmware

Multilin sr 760 feeder protection relay firmware

Multilin universal relay firmware

Multilin sr 369 motor protection relay firmware

Multilin urplus b95 firmware

Multilin sr 750 feeder protection relay firmware

Multilin sr 469 motor protection relay firmware

D60 line distance relay firmware

Gemnet license server

Xeleris

Infinia hawkeye 4 firmware

Centricity pacs ra1000

Pacsystems cpu320 firmware

Pacsystems cru320 firmware

Pacsystems rsti-ep cpe 100 firmware

Pacsystems rx3i cpe305 firmware

Pacsystems rx3i cpe310 firmware

Pacsystems rxi firmware

Rx3i cpe330 firmware

Rx3i cpe 400 firmware

Snmp/web adapter firmware

Ge communicator

Aespire 7100 firmware

Aespire 7900 firmware

Aestiva 7100 firmware

Aestiva 7900 firmware

Mark vie controll system

Mark vie control system

Industrial gateway server

Ur bootloader binary