What’s Vulnerable › Vulnerabilities

CVE-2018-10600

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-07-24 · updated 2026-06-17
• Weakness: CWE-611

Description

SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in certain situations on specific platforms), and denial of service attacks.

Affected products

• Schweitzer Engineering Laboratories, Inc. AcSELerator Architect: through 2.2.24.0

References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02
• https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02

Get alerted when CVE-2018-10600 or the next vulnerability affects your stack