CVE-2019-10966

2019-07-1017:52:23

CWE-287

icscert

www.cve.org

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.6%

JSON

In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuration and silence alarms.

CNA Affected

[
  {
    "product": "Aestiva and Aespire",
    "vendor": "GE",
    "versions": [
      {
        "status": "affected",
        "version": "versions 7100"
      },
      {
        "status": "affected",
        "version": "versions 7900"
      }
    ]
  }
]