Vulnerability in General Electric
3322Warning Date
Severity Level
Warning Number
Target Sector
10 October, 2019
● Medium
2019-510
Energy
Description:
General Electric has released clarification to address a vulnerabilities in the GE Mark VIe Controller.
Threats:
Attacker could exploit these vulnerabilities by creating read/write/execute commands on the affected system.
Best practice and Recommendations:
General Electric recommends users to apply the following mitigations:
- Disable the Telnet service.
- Reset controller passwords upon transfer of Mark VIe to the operating environment.
For more information, contact General Electric at: