ID de Prueba:	1.3.6.1.4.1.25623.1.0.807075
Categoría:	Web application abuses
Título:	GE SNMP/Web Interface Multiple Vulnerabilities
Resumen:	SNMP/Web Interface adapter is prone to multiple vulnerabilities.
Descripción:	Summary: SNMP/Web Interface adapter is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - Device does not perform strict input validation. - File contains sensitive account information stored in cleartext. Vulnerability Impact: Successful exploitation will allow remote authenticated users to execute arbitrary command on the system and to obtain sensitive cleartext account information impacting the confidentiality, integrity, and availability of the system. Affected Software/OS: General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware version before 4.8 Solution: Upgrade to GE SNMP/Web Interface adapter version 4.8 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0861 https://www.exploit-db.com/exploits/39408/ http://seclists.org/fulldisclosure/2016/Feb/21 http://packetstormsecurity.com/files/135586/GE-Industrial-Solutions-UPS-SNMP-Adapter-Command-Injection.html https://ics-cert.us-cert.gov/advisories/ICSA-16-033-02 Common Vulnerability Exposure (CVE) ID: CVE-2016-0862
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.