CVE-2018-6020
In Silex SX-500 all versions and GE MobileLink(GEH-500) version 1.54 and prior, authentication is not verified when making certain POST requests, which may allow attackers to modify system settings.
- Score
- CVSS 3.0 6.5 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2018-05-09
- Last modified
- 2024-09-17
- Weaknesses
- CWE-287
Affected products
- Geh-500 Firmware (Silextechnology)
- Geh-sd-320an Firmware (Silextechnology)
- Sd-320an Firmware (Silextechnology)
- Sx-500 Firmware (Silextechnology)
References
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-128-01
