CVE-2018-10611

2018-05-3100:00:00

CWE-287

icscert

www.cve.org

9.8 High

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.1%

JSON

Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to allow unauthenticated users to launch applications and support remote code execution through web services.

CNA Affected

[
  {
    "product": "MDS PulseNET and MDS PulseNET Enterprise",
    "vendor": "GE",
    "versions": [
      {
        "status": "affected",
        "version": "Version 3.2.1 and prior"
      }
    ]
  }
]