CVE-2020-25193

🗓️ 18 Mar 2022 18:00:35Reported by icscertType

GE Reason RT430, RT431 & RT434 GNSS clocks hard-coded key exposur

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-25193	18 Mar 202221:29	–	circl
CNNVD	Various GE products are vulnerable to trust management issues	5 Jan 202100:00	–	cnnvd
Cvelist	CVE-2020-25193 GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key	18 Mar 202218:00	–	cvelist
EUVD	EUVD-2020-17884	7 Oct 202500:30	–	euvd
ICS	GE Reason RT43X Clocks	5 Jan 202100:00	–	ics
NVD	CVE-2020-25193	18 Mar 202218:15	–	nvd
Prion	Hardcoded credentials	18 Mar 202218:15	–	prion
Positive Technologies	PT-2022-8710 · Ge · Ge Reason Rt430 +2	18 Mar 202200:00	–	ptsecurity
RedhatCVE	CVE-2020-25193	22 May 202517:54	–	redhatcve
Vulnrichment	CVE-2020-25193 GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key	18 Mar 202218:00	–	vulnrichment

NVD

Vulners

Node

ge rt430_firmwareRange<08a06

AND

ge rt430Match-

Node

ge rt431_firmwareRange<08a06

AND

ge rt431Match-

Node

ge rt434_firmwareRange<08a06

AND

ge rt434Match-

[
  {
    "product": "Reason RT43X Clocks",
    "vendor": "GE",
    "versions": [
      {
        "lessThan": "08A06",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-005-03
gegridsolutions	www.gegridsolutions.com/app/DownloadFile.aspx

21 Nov 2024 05:17Current

5.7Medium risk

Vulners AI Score5.7

CVSS 25

CVSS 3.15.3

EPSS0.0017

SSVC

cve-2020-25193 ge reason rt430 rt431 rt434 gnss clocks firmware encryption https