CVE-2019-10966

https://notcve.org/view.php?id=CVE-2019-10966

10 Jul 2019 — In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuration and silence alarms. En Aestiva y Aespire de GE versiones 7100 y 7900, se presenta una vulnerabilidad donde los dispositivos seriales son conectados por medio de un servidor terminal no seguro agregado a una configuración de red TCP/IP, lo que podría permitir a... • http://www.securityfocus.com/bid/109102 • CWE-287: Improper Authentication •