SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in certain situations on specific platforms), and denial of service attacks.
References
Link | Resource |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02 | Third Party Advisory US Government Resource |
Configurations
Information
Published : 2018-07-24 06:29
Updated : 2019-10-09 16:32
NVD link : CVE-2018-10600
Mitre link : CVE-2018-10600
JSON object : View
CWE
CWE-611
Improper Restriction of XML External Entity Reference
Products Affected
selinc
- acselerator_architect