PT-2016-4425 · General Electric · Ge Industrial Solutions Ups Snmp/Web Adapter

Karn Ganeshen · Published 2016-02-05 · Updated 2018-10-17 · CVE-2016-0862

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware prior to 4.8

Description The issue allows remote authenticated users to obtain sensitive cleartext account information.

Recommendations For firmware versions prior to 4.8, update the firmware to version 4.8 or later to resolve the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-0862

Affected Products

Ge Industrial Solutions Ups Snmp/Web Adapter

References · 7

• 🔥 https://exploit-db.com/exploits/39408 · Exploit
• http://apps.geindustrial.com/publibrary/checkout/Application%20and%20Technical%7CGEIS_SNMP%7CPDF&filename=GEIS_SNMP.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-0862 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0862 · Security Note
• http://packetstormsecurity.com/files/135586/GE-Industrial-Solutions-UPS-SNMP-Adapter-Command-Injection.html · Note
• http://seclists.org/fulldisclosure/2016/Feb/21 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-033-02 · Note