medium6.5
CVE-2018-6020
In Silex SX-500 all versions and GE MobileLink(GEH-500) version 1.54 and prior, authentication is not verified when making certain POST requests, which may all…
Impact
In Silex SX-500 all versions and GE MobileLink(GEH-500) version 1.54 and prior, authentication is not verified when making certain POST requests, which may allow attackers to modify system settings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silextechnology | Sd-320an Firmware | through 2.01 |
| Silextechnology | Geh-Sd-320an Firmware | through geh-1.1 |
| Silextechnology | Geh-500 Firmware | through 1.54 |
| Silextechnology | Sx-500 Firmware | All versions |