CVE-2018-6020

2018-05-0921:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

40.1%

JSON

In Silex SX-500 all versions and GE MobileLink(GEH-500) version 1.54 and prior, authentication is not verified when making certain POST requests, which may allow attackers to modify system settings.

References

ics-cert.us-cert.gov/advisories/ICSMA-18-128-01