Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-19003
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Versions 03.03.28C to 05.02.04C, EX2100e All versions prior to v04.09.00C, EX2100e_Reg All versions prior to v04.09.00C, and LS2100e All versions prior to v04.09.00C The affected versions of the application have a path traversal vulnerability that fails to restrict the ability of an attacker to gain access to restricted information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: NVD (National Vulnerability Database)
Vulnerability Title
多款GE产品路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GE Mark VIe等都是美国通用电气（GE）公司的产品。GE Mark VIe是一套机组控制系统。EX2100e是一套数字化励磁系统。 多款GE产品中存在路径遍历漏洞，该漏洞源于程序没有限制攻击者的权限。攻击者可利用该漏洞访问受限制的信息。以下产品和版本受到影响：GE Mark VIe 03.03.28C版本至05.02.04C版本；EX2100e 04.09.00C之前版本；EX2100e_Reg 04.09.00C之前版本；LS2100e 04.09.00C之前版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Mark VIe Versions 03.03.28C to 05.02.04C, EX2100e All versions prior to v04.09.00C, EX2100e_Reg All versions prior to v04.09.00C, and LS2100e All versions prior to v04.09.00C -
II. Public POCs for CVE-2018-19003
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2018-19003
Please Login to view more intelligence information
New Vulnerabilities
Vendor: n/a
Same weakness: CWE-22
V. Comments for CVE-2018-19003

No comments yet

Leave a comment