Unscored CVE-2018-6020 EUVD-2018-17783GHSA-vg3g-97mm-4p4w

In Silex SX-500 all versions and GE MobileLink(GEH-500) version 1.54 and prior, authentication is not verified when making certain POST req…

Published May 9, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

In Silex SX-500 all versions and GE MobileLink(GEH-500) version 1.54 and prior, authentication is not verified when making certain POST requests, which may allow attackers to modify system settings.

Advisories 1

ICSMA-18-128-01 Silex Technology SX-500/SD-320AN or GE Healthcare MobileLink (Update B) CISA ICS & IT advisories · Jun 5, 2018

References

https://ics-cert.us-cert.gov/advisories/ICSMA-18-128-01