Lucene search
PRIOn knowledge basePRION:CVE-2015-6456HistorySep 18, 2015 - 10:59 p.m.
Hardcoded credentials
2015-09-1822:59:00
PRIOn knowledge base
www.prio-n.com
3
GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account, which allows remote attackers to obtain administrative access, and consequently execute arbitrary code, by leveraging knowledge of the password.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mds_pulsenet | le | 3.1.3 | |
| mds_pulsenet | le | 3.1.3 |
Related
cve
cve
CVE-2015-6456
2015-09-18 22:59:05
zdi
zdi
GE MDS PulseNET Hidden Support Account Remote Code Execution Vulnerability
2015-09-16 00:00:00
checkpoint_advisories
checkpoint_advisories
GE MDS PulseNET Hidden Support Account Remote Code Execution (CVE-2015-6456)
2015-10-07 00:00:00
nvd
nvd
CVE-2015-6456
2015-09-18 22:59:05
cvelist
cvelist
CVE-2015-6456
2015-09-18 22:00:00
ics
ics
GE MDS PulseNET Vulnerabilities
2018-08-27 12:00:00