Selinc Acselerator Architect vulnerabilities

2 CVEs affecting Selinc Acselerator Architect, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-10608, published 2018-07-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-10608, published 2018-07-24. High severity, CVSS 7.5. EPSS: 7.8% chance of exploitation in the next 30 days. SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited when the AcSELerator Architect FTP client connects to a malicious FTP server, which may cause denial of service via 100% CPU…
CVE-2018-10600, published 2018-07-24. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in…