CVE-2016-0862

6.5 MEDIUM

Published: February 05, 2016 Modified: May 06, 2026

Description

General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to obtain sensitive cleartext account information via unspecified vectors.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://apps.geindustrial.com/publibrary/checkout/Application%20and%20Technical%7CGEIS_SNMP%7CPDF&filename=GEIS_SNMP.pdf

Source: ics-cert@hq.dhs.gov

Vendor Advisory

http://packetstormsecurity.com/files/135586/GE-Industrial-Solutions-UPS-SNMP-Adapter-Command-Injection.html

Source: ics-cert@hq.dhs.gov

Third Party Advisory VDB Entry

http://seclists.org/fulldisclosure/2016/Feb/21

Source: ics-cert@hq.dhs.gov

Mailing List Third Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-16-033-02

Source: ics-cert@hq.dhs.gov

Third Party Advisory US Government Resource

https://www.exploit-db.com/exploits/39408/

Source: ics-cert@hq.dhs.gov

Third Party Advisory VDB Entry

http://apps.geindustrial.com/publibrary/checkout/Application%20and%20Technical%7CGEIS_SNMP%7CPDF&filename=GEIS_SNMP.pdf