What’s Vulnerable › Vulnerabilities

CVE-2018-6020

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-05-09 · updated 2026-06-17
• Weakness: CWE-287

Description

In Silex SX-500 all versions and GE MobileLink(GEH-500) version 1.54 and prior, authentication is not verified when making certain POST requests, which may allow attackers to modify system settings.

Affected products

• Silextechnology Geh-500 Firmware: through 1.54
• Silextechnology Geh-Sd-320An Firmware: through geh-1.1
• Silextechnology Sd-320An Firmware: through 2.01
• Silextechnology Sx-500 Firmware: all versions

References

• https://ics-cert.us-cert.gov/advisories/ICSMA-18-128-01
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-128-01

Get alerted when CVE-2018-6020 or the next vulnerability affects your stack