Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-16246

GE Reason S20 Ethernet Switch

Description

The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site and executed by the victim client.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

General Electric Reason S20 Ethernet Switch

  • S2020 to ≤ 07A06affected
  • S2024 to ≤ 07A06affected

References