CVE-2019-13559CWE-798

GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the controller

published April 7, 2020

CVSS
—
EPSS
0%
Percentile
21.3
In the wild
Unconfirmed
What it is

GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the controller. A limited application of the affected product may ship without setup and configuration instructions immediately available to the end user. The bulk of controllers go into applications requiring the GE commissioning engineer to change default configurations during the installation process. GE recommends that users reset controller passwords during installation in the operating environment.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00297 · 21.3th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2020-04-07T17:03Z
EPSS history
Timeline
  • 07 APR 17:03Z
    GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the controller
    cvelistv5