CVE-2019-6548

2019-05-0914:28:07

CWE-798

icscert

www.cve.org

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.7%

JSON

GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This service is inaccessible to attackers if Windows default firewall settings are used by the end user.

CNA Affected

[
  {
    "product": "GE Communicator",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 4.0.517"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-19-122-02