Skip to content
OpenAdvisories
Medium ICSA-19-281-02 2 CVEs

GE Mark VIe Controller

Published Oct 8, 2019 · Updated Oct 8, 2019

Vendor: General Electric (GE) Product: GE Mark Vle Controller

Summary

Successful exploitation of these vulnerabilities could allow an attacker to create read/write/execute commands within the Mark VIe control system.

Vulnerabilities 2

  • Unscored —
    CVE-2019-13554

    GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using …

  • Unscored —
    CVE-2019-13559

    GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the con…

Revision history

  1. #1

    ICSA-19-281-02 GE Mark VIe Controller

References