Skip to content
Sign in
9.8 Critical

CVE-2020-25197 A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware…

Description

A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.

Affected products and versions

Product Affected versions Fixed in
Reason RT43X Clocks 08 earliest → < 08A06 08A06

Other CVEs of Reason RT43X Clocks

The 2 CVEs of Reason RT43X Clocks →
CVE-2020-25193 By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions… 5.3 Medium
Track this CVE