CVE-2018-19003
High
Description
GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Versions 03.03.28C to 05.02.04C, EX2100e All versions prior to v04.09.00C, EX2100e_Reg All versions prior to v04.09.00C, and LS2100e All versions prior to v04.09.00C The affected versions of the application have a path traversal vulnerability that fails to restrict the ability of an attacker to gain access to restricted information.
SeverityHigh
CVSS7.5
Exploit probability—
ProductGe Ex2100e Firmware
PublishedDec 14, 2018
First seenDec 14, 2018
Weakness typeCWE-22Path traversal
How to fix
Update
- ge ex2100e_firmware04.09.00c or later
- ge ls2100e_firmware04.09.00c or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ge ex2100e_firmware | v < 04.09.00c, 03.03.28c ≤ v ≤ 05.02.04c | 04.09.00c |
| ge ls2100e_firmware | v < 04.09.00c, 03.03.28c ≤ v ≤ 05.02.04c | 04.09.00c |
| ge mark_vle_firmware | 03.03.28c ≤ v ≤ 05.02.04c | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.