Test ID:	1.3.6.1.4.1.25623.1.0.807075
Category:	Web application abuses
Title:	GE SNMP/Web Interface Multiple Vulnerabilities
Summary:	SNMP/Web Interface adapter is prone to multiple vulnerabilities.
Description:	Summary: SNMP/Web Interface adapter is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - Device does not perform strict input validation. - File contains sensitive account information stored in cleartext. Vulnerability Impact: Successful exploitation will allow remote authenticated users to execute arbitrary command on the system and to obtain sensitive cleartext account information impacting the confidentiality, integrity, and availability of the system. Affected Software/OS: General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware version before 4.8 Solution: Upgrade to GE SNMP/Web Interface adapter version 4.8 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0861 https://www.exploit-db.com/exploits/39408/ http://seclists.org/fulldisclosure/2016/Feb/21 http://packetstormsecurity.com/files/135586/GE-Industrial-Solutions-UPS-SNMP-Adapter-Command-Injection.html https://ics-cert.us-cert.gov/advisories/ICSA-16-033-02 Common Vulnerability Exposure (CVE) ID: CVE-2016-0862
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.