Sensitive information can be obtained from the GE D20 Remote Terminal Unit via TFTP

high Nessus Plugin ID 57602

Language:

Synopsis

The remote SCADA device is affected by an information disclosure vulnerability.

Description

The remote device is a GE D20 Remote Terminal Unit that makes its configuration file available over TFTP. This file contains sensitive data such as plaintext usernames and passwords.

Solution

Block access to this port.

Plugin Details

Severity: High

ID: 57602

File Name: scada_tftp_d20_sensitive_data.nbin

Version: 1.78

Type: remote

Family: SCADA

Published: 1/19/2012

Updated: 7/17/2024

Supported Sensors: Nessus

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Reference Information

BID: 51578

ICS-ALERT: 12-019-01

Detections

Analytics