1749 matches found
CVE-2020-6992
A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability could allow an adversary to modify the system, leading to the arbitrary execution of code. This vulnerability is only exploitable if an...
Privilege escalation
A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability could allow an adversary to modify the system, leading to the arbitrary execution of code. This vulnerability is only exploitable if an...
CVE-2020-6992
A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability could allow an adversary to modify the system, leading to the arbitrary execution of code. This vulnerability is only exploitable if an...
CVE-2020-6992
GE Digital CIMPLICITY HMI/SCADA vulnerability CVE-2020-6992 affects CIMPLICITY v10.0 and earlier. It is a local privilege escalation (CWE-269) that requires an authenticated session to modify the system and arbitrarily execute code. Affected component: CIMPLICITY HMI/SCADA software; root cause is...
CVE-2020-6992
A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability could allow an adversary to modify the system, leading to the arbitrary execution of code. This vulnerability is only exploitable if an...
CVE-2020-6992: Improper Privilege Management
A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability could allow an adversary to modify the system, leading to the arbitrary execution of code. This vulnerability is only exploitable if an...
Buffer Overflow Vulnerability in GE Control System ACTIVEX Control (CNVD-2020-26346)
General Electric GE is a global digital industrial company that creates software-defined machines that are connected, responsive and predictive to transform traditional industries. A buffer overflow vulnerability exists in the ACTIVEX control of the GE control system, which can be exploited by an...
Buffer overflow vulnerability in GE control system ACTIVEX control (CNVD-2020-26342)
General Electric GE is a global digital industrial company that creates software-defined machines that are connected, responsive and predictive to transform traditional industries. A buffer overflow vulnerability exists in the ACTIVEX control of the GE control system, which can be exploited by an...
CVE-2019-13554
GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using generic default credentials. GE recommends that users disable the Telnet service...
CVE-2019-13559
GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the controller. A limited application of the affected product may ship without setup and configuration instructions immediately available to the end user. The bulk of controllers go int...
Design/Logic Flaw
GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using generic default credentials. GE recommends that users disable the Telnet service...
Hardcoded credentials
GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the controller. A limited application of the affected product may ship without setup and configuration instructions immediately available to the end user. The bulk of controllers go int...
CVE-2019-13559
GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the controller. A limited application of the affected product may ship without setup and configuration instructions immediately available to the end user. The bulk of controllers go int...
CVE-2019-13559
The CVE-2019-13559 issue affects GE Mark VIe Controllers, where hard-coded credentials may allow a root-user access if a device is deployed with default credentials. The ICSA advisory confirms two vulnerabilities: Improper Authorization and Use of Hard-coded Credentials, indicating local access c...
CVE-2019-13554
GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using generic default credentials. GE recommends that users disable the Telnet service...
CVE-2019-13554
CVE-2019-13554 affects the GE Mark VIe Controller, where an unsecured Telnet protocol may allow an attacker to create an authenticated session using default credentials. The vulnerability is documented with concrete details: affected product and a root cause of unauthenticated Telnet access with ...
PT-2020-9408
Name of the Vulnerable Software and Affected Versions: GE Mark VIe Controller affected versions not specified Description: The GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the controller. A limited application of the affected...
PT-2020-9407
Name of the Vulnerable Software and Affected Versions: GE Mark VIe Controller affected versions not specified Description: The issue concerns an unsecured Telnet protocol that may allow a user to create an authenticated session using generic default credentials. There is no information provided...
CVE-2019-13554: Improper Authorization
GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using generic default credentials. GE recommends that users disable the Telnet service...
CVE-2019-13559: Use of Hard-coded Credentials
GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the controller. A limited application of the affected product may ship without setup and configuration instructions immediately available to the end user. The bulk of controllers go int...