Security experts discovered a critical vulnerability in GE Multilin SR that poses a serious threat to the power grid worldwide. Experts will provide further details about the vulnerability at the upcoming Black Hat conference in Las Vegas. The ICS-CERT published a security advisory on this threat that was tracked as CVE-2017-7905. An attacker can obtain the password either from the front LCD panel or via Modbus commands and use it to gain unauthorized access to vulnerable products. GE has promptly released firmware updates that fix the vulnerability for most of the above products.”]
Source: https://securityaffairs.co/wordpress/58501/hacking/ge-multilin-sr-flaw.html