9
CVSSv2

CVE-2020-25197

Published: 18/03/2022 Updated: 28/03/2022
CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 801
Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

Vulnerability Summary

A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote malicious user to execute arbitrary code on the system.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ge rt430_firmware

ge rt431_firmware

ge rt434_firmware