Vulnerability Description
XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0
CVSS Score
9.1
CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ge | Cimplicity | 9.0_r2 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/106133Third Party AdvisoryVDB Entry
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/07/klcert-18MitigationThird Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-18-340-01MitigationThird Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/106133Third Party AdvisoryVDB Entry
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/07/klcert-18MitigationThird Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-18-340-01MitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2018-15362?
CVE-2018-15362 is a vulnerability with a CVSS score of 9.1 (CRITICAL). XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0
How severe is CVE-2018-15362?
CVE-2018-15362 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-15362?
Check the references section above for vendor advisories and patch information. Affected products include: Ge Cimplicity.