CVE-2018-6020

Name of the Vulnerable Software and Affected Versions Silex SX-500 versions all GE MobileLink version 1.54 and prior

Description The issue concerns authentication verification when making certain POST requests. Specifically, authentication is not properly verified, which may allow attackers to modify system settings.

Recommendations For Silex SX-500, update to a version that properly verifies authentication for all requests. For GE MobileLink version 1.54 and prior, update to a version that properly verifies authentication for all requests. As a temporary workaround, consider restricting access to the system settings until a patch is available.