CVE-2012-6663

HIGH

GE D20me Firmware - Insufficiently Protected Credentials

Title source: rule

Description

General Electric D20ME devices are not properly configured and reveal plaintext passwords.

Exploits (1)

metasploit WORKING POC
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/d20pass.rb

References (1)

Scores

CVSS v3 7.5
EPSS 0.2314
EPSS Percentile 95.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-522
Status published

Affected Products (2)

ge/d20me_firmware
ge/d200_firmware

Timeline

Published Jan 23, 2020
Tracked Since Feb 18, 2026