PT-2016-4424 · General Electric · Ge Industrial Solutions Ups Snmp/Web Adapter

Karn Ganeshen · Published 2016-02-05 · Updated 2017-09-10 · CVE-2016-0861

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware prior to 4.8

Description The issue allows remote authenticated users to execute arbitrary commands via unspecified vectors.

Recommendations For firmware versions prior to 4.8, update the firmware to version 4.8 or later to resolve the issue.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2016-0861

Affected Products

Ge Industrial Solutions Ups Snmp/Web Adapter

References · 7

• 🔥 https://exploit-db.com/exploits/39408 · Exploit
• http://apps.geindustrial.com/publibrary/checkout/Application%20and%20Technical%7CGEIS_SNMP%7CPDF&filename=GEIS_SNMP.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0861 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0861 · Vendor Advisory
• http://packetstormsecurity.com/files/135586/GE-Industrial-Solutions-UPS-SNMP-Adapter-Command-Injection.html · Note
• http://seclists.org/fulldisclosure/2016/Feb/21 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-033-02 · Note