CVE-2015-6456: Ge Mds Pulsenet

High severity, CVSS 9.0. EPSS: 3.8% chance of exploitation in the next 30 days.

GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account, which allows remote attackers to obtain administrative access, and consequently execute arbitrary code, by leveraging knowledge of the password.

Affected products

• Ge Mds Pulsenet: up to and including 3.1.3

Published 2015-09-18. Last modified 2026-06-17.