{"id":"CVE-2018-10600","aliases":["EUVD-2018-2672","GHSA-c2jj-mcxw-pm5x"],"status":"published","title":"SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the...","description":"SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in certain situations on specific platforms), and denial of service attacks.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02468,"percentile":0.84605,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-611"],"published":"2018-07-24T13:00:00Z","modified":"2026-06-17T01:34:15Z","products":[{"vendor":"schweitzer engineering laboratories, inc.","product":"acselerator architect"},{"vendor":"selinc","product":"acselerator_architect"}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10600"},{"url":"https://github.com/advisories/GHSA-c2jj-mcxw-pm5x"}],"sources":{"cve":[{"id":"CVE-2018-10600","description":"SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in certain situations on specific platforms), and denial of service attacks.","status":"published","published":"2018-07-24T13:00:00Z","modified":"2024-09-16T16:17:38.171Z","cwes":["CWE-611"],"updated_at":"2026-11-02T14:35:01.952568Z"}],"euvd":[{"id":"EUVD-2018-2672","description":"SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in certain situations on specific platforms), and denial of service attacks.","status":"published","published":"2018-07-24T13:00:00Z","modified":"2024-09-16T16:17:38Z","updated_at":"2026-11-03T00:55:53.554412Z"}],"ghsa":[{"id":"GHSA-c2jj-mcxw-pm5x","title":"SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the...","description":"SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in certain situations on specific platforms), and denial of service attacks.","status":"published","published":"2022-05-13T01:35:00Z","modified":"2023-02-01T05:08:48Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:50:51.621418Z"}],"nvd":[{"id":"CVE-2018-10600","description":"SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in certain situations on specific platforms), and denial of service attacks.","status":"published","published":"2018-07-24T13:29:00.307Z","modified":"2026-06-17T01:34:15.223Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:04:33.865124Z"}]}}