5.3
CVSSv3

CVE-2019-10966

Published: 10/07/2019 Updated: 02/10/2020
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an malicious user to remotely modify device configuration and silence alarms.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ge aestiva_7100_firmware -

ge aestiva_7900_firmware -

ge aespire_7100_firmware -

ge aespire_7900_firmware -