PT-2019-12107 · Ge · Ge Aestiva+1

Elad Luz · Published 2019-07-10 · Updated 2020-10-02 · CVE-2019-10966

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions GE Aestiva versions 7100 GE Aespire versions 7900

Description A vulnerability exists in the specified GE Aestiva and Aespire versions where serial devices connected via an added unsecured terminal server to a TCP/IP network configuration could allow an attacker to remotely modify device configuration and silence alarms.

Recommendations For GE Aestiva version 7100, consider securing the terminal server connection to prevent unauthorized access. For GE Aespire version 7900, consider securing the terminal server connection to prevent unauthorized access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-10966

Affected Products

Ge Aespire

Ge Aestiva

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-10966 · Security Note
• https://us-cert.gov/ics/advisories/icsma-19-190-01 · Note
• http://securityfocus.com/bid/109102 · Note