CVEvulnerability
CVE-2019-6548
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-05-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-798
Description
GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This service is inaccessible to attackers if Windows default firewall settings are used by the end user.
Affected configurations
• ge ge communicator (< 4.0.517)
Related
Weakness · CWE (1)
- CWE-798 Use of Hard-coded Credentials weakness
References
- https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02 Mitigation, Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02 Mitigation, Third Party Advisory, US Government Resource