Lucene search
K

7 matches found

CNNVD
CNNVD
added 2023/04/11 12:0 a.m.4 views

GE Gas Power ToolBoxST 代码问题漏洞

GE Gas Power ToolBoxST is a control system toolbox from General Electric GE for process, SIL, excitation and power conversion. A security vulnerability exists in GE Gas Power ToolBoxST versions prior to 7.10, which stems from the presence of a deserialization vulnerability that can be exploited b...

7.8CVSS7.7AI score0.00095EPSS
Exploits0References2
OSV
OSV
added 2022/03/25 7:15 p.m.3 views

CVE-2021-44477

GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity XXE vulnerability using the DTD parameter entities technique that could result in disclosure and retrieval of arbitrary data on the affected node via an out-of-band OOB attack. The vulnerability is triggered when input...

7.5CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2022/03/25 7:15 p.m.12 views

CVE-2021-44477

GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity XXE vulnerability using the DTD parameter entities technique that could result in disclosure and retrieval of arbitrary data on the affected node via an out-of-band OOB attack. The vulnerability is triggered when input...

7.5CVSS0.00266EPSS
Exploits0References1
Prion
Prion
added 2022/03/25 7:15 p.m.15 views

Xxe

GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity XXE vulnerability using the DTD parameter entities technique that could result in disclosure and retrieval of arbitrary data on the affected node via an out-of-band OOB attack. The vulnerability is triggered when input...

5CVSS7.6AI score0.00266EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/03/25 6:2 p.m.9 views

CVE-2021-44477 GE Gas Power ToolBoxST Improper Restriction of XML External Entity Reference

GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity XXE vulnerability using the DTD parameter entities technique that could result in disclosure and retrieval of arbitrary data on the affected node via an out-of-band OOB attack. The vulnerability is triggered when input...

7.5CVSS7.5AI score0.00266EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/03/25 6:2 p.m.13 views

CVE-2021-44477 GE Gas Power ToolBoxST Improper Restriction of XML External Entity Reference

GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity XXE vulnerability using the DTD parameter entities technique that could result in disclosure and retrieval of arbitrary data on the affected node via an out-of-band OOB attack. The vulnerability is triggered when input...

7.5CVSS7.6AI score0.00266EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/01/25 12:0 a.m.4 views

GE Gas Power ToolBoxST 代码问题漏洞

GE Gas Power ToolBoxST is a control system toolbox from General Electric GE for process, SIL, excitation, and power conversion. A code issue vulnerability exists in GE Gas Power ToolBoxST version v04.07.05C, which can be exploited by an attacker to disclose and retrieve arbitrary data on an...

7.5CVSS7.5AI score0.00266EPSS
Exploits0References5
Rows per page
Query Builder