CVE-2018-10600

2018-07-1000:00:00

CWE-611

icscert

www.cve.org

9.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.4%

JSON

SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in certain situations on specific platforms), and denial of service attacks.

CNA Affected

[
  {
    "product": "AcSELerator Architect",
    "vendor": "Schweitzer Engineering Laboratories, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "2.2.24.0 and prior"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-18-191-02