CVE-2019-10966

Name of the Vulnerable Software and Affected Versions GE Aestiva versions 7100 GE Aespire versions 7900

Description A vulnerability exists in the specified GE Aestiva and Aespire versions where serial devices connected via an added unsecured terminal server to a TCP/IP network configuration could allow an attacker to remotely modify device configuration and silence alarms.

Recommendations For GE Aestiva version 7100, consider securing the terminal server connection to prevent unauthorized access. For GE Aespire version 7900, consider securing the terminal server connection to prevent unauthorized access.