Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2020-25197

GE Reason RT43X Clocks Code Injection

Description

A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GE Reason RT43X Clocks

  • unspecified to < 08A06affected

References