Detections
Analytics

CVE-2018-10611

critical

Description

Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to allow unauthenticated users to launch applications and support remote code execution through web services.

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02

http://www.securityfocus.com/bid/104377

http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1

Details

Source: Mitre, NVD

Published: 2018-06-04

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.07978