PT-2015-7253

Name of the Vulnerable Software and Affected Versions GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise versions prior to 3.1.5 Description The issue allows remote attackers to obtain administrative access and execute arbitrary code by leveraging knowledge of a hardcoded password for a...

PT-2015-3063

Name of the Vulnerable Software and Affected Versions GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise versions prior to 3.1.5 Description The issue is related to an absolute path traversal vulnerability in the download feature of the FileDownloadServlet. This vulnerability allows remot...

GE MDS PulseNET Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from HP’s Zero Day Initiative ZDI concerning two vulnerabilities in GE’s MDS PulseNET and MDS PulseNET Enterprise Network Management Software. These vulnerabilities were reported to ZDI by security researcher Andrea Micalizzi. GE has produced a new versio...