High ICSA-18-191-02 3 CVEs

Schweitzer Engineering Laboratories, Inc. Compass and AcSELerator Architect

Published Jul 10, 2018 · Updated Jul 10, 2018

Vendor: Schweitzer Engineering Laboratories, Inc. (SEL) Product: AcSELerator Architect Product: Compass

Summary

Successful exploitation of these vulnerabilities could allow modification/replacement of files within the Compass installation directory, disclosure of information, or denial of service.

Vulnerabilities 3

Unscored —

CVE-2018-10600

SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may…

Schweitzer Engineering Laboratories AcSELerator Architect

Jul 24, 2018
Unscored —

CVE-2018-10604

SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modifi…

Schweitzer Engineering Laboratories Compass

Jul 24, 2018
Unscored —

CVE-2018-10608 Public exploit

SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited when the AcSELerator Architect FTP client connect…

Schweitzer Engineering Laboratories AcSELerator Architect

Jul 24, 2018

Revision history

2018-07-10 #1
ICSA-18-191-02 Schweitzer Engineering, Inc. Compass and AcSELerator Architect

References

ICS Advisory ICSA-18-191-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-191-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B