CVE-2012-6663

HIGH

GE D20me Firmware - Insufficiently Protected Credentials

Title source: rule
STIX 2.1

Description

General Electric D20ME devices are not properly configured and reveal plaintext passwords.

Exploits (1)

metasploit WORKING POC
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/d20pass.rb

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
http://www.rapid7.com/db/modules/auxiliary/gather/d20pass

Scores

CVSS v3 7.5
EPSS 0.2314
EPSS Percentile 96.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-522
Status published
Products (2)
ge/d200_firmware
ge/d20me_firmware
Published Jan 23, 2020
Tracked Since Feb 18, 2026