Description
GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account, which allows remote attackers to obtain administrative access, and consequently execute arbitrary code, by leveraging knowledge of the password.
Advisories 1
- ICSA-15-258-03 GE MDS PulseNET Vulnerabilities CISA ICS & IT advisories · Jun 5, 2025