QwikSec

Security Database

CVE

CWE

Training

CVE-2015-6456

Published: Sep 18, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account, which allows remote attackers to obtain administrative access, and consequently execute arbitrary code, by leveraging knowledge of the password.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://zerodayinitiative.com/advisories/ZDI-15-440/

x_refsource_MISC

http://www.gedigitalenergy.com/app/resources.aspx?prod=pulsenet&type=9

x_refsource_CONFIRM

https://ics-cert.us-cert.gov/advisories/ICSA-15-258-03

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.