CVE-2019-6548CWE-798

GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database

published May 9, 2019

CVSS
—
EPSS
1%
Percentile
69.7
In the wild
Unconfirmed
What it is

⚠️ Two backdoor accounts lurk in GE Communicator, ready to unleash chaos! With hardcoded credentials, they just need an invitation to take control. 🔥 Think of it like a restaurant with two secret entrances that only the chef knows about — if anyone finds them, they can mess with the menu. If your Windows firewall is up, you're safe, but those doors shouldn't be there in the first place! If an attacker discovers these backdoors, they could gain full access to the database, tampering with vital data or even taking the entire service hostage. It’s like letting someone rewrite the restaurant’s entire menu without permission — absolutely devastating for your operations!

Put simply

Think of it like a restaurant with two secret entrances that only the chef knows about — if anyone finds them, they can mess with the menu. If your Windows firewall is up, you're safe, but those doors shouldn't be there in the first place! CVE-2019-6548 features two hardcoded backdoor accounts in GE Communicator, allowing unauthorized access to the database unless properly secured by the Windows firewall settings.

What to do

If an attacker discovers these backdoors, they could gain full access to the database, tampering with vital data or even taking the entire service hostage. It’s like letting someone rewrite the restaurant’s entire menu without permission — absolutely devastating for your operations! To protect yourself, upgrade to version 4.0.517 immediately to close those sneaky backdoors. Ensure that your Windows firewall is configured correctly, and consider additional security measures like network segmentation and monitoring for suspicious activity. You've got this! Follow these steps, and you’ll be a security hero in no time! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01277 · 69.7th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2019-05-09T14:28Z
EPSS history
Timeline
  • 09 MAY 14:28Z
    GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database
    cvelistv5