CVE-2019-10966

Summary

In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuration and silence alarms.

Affected Software

Weaknesses

• CWE-287: IMPROPER AUTHENTICATION CWE-287

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/109102
• https://www.us-cert.gov/ics/advisories/icsma-19-190-01

References

• http://www.securityfocus.com/bid/109102
• https://www.us-cert.gov/ics/advisories/icsma-19-190-01

• ←Previous
• Next→