CVE-2020-25197

🗓️ 18 Mar 2022 18:00:34Reported by icscertType

Code injection vuln in GE Reason RT430, RT431 & RT434 GNSS clocks fw prior to 08A06 allows authenticated remote attacker to execute arbitrary code

Reporter	Title	Published	Views	Family All 8
CNNVD	GE Reason RT430 Clock Code Injection Vulnerability	5 Jan 202100:00	–	cnnvd
Cvelist	CVE-2020-25197 GE Reason RT43X Clocks Code Injection	18 Mar 202218:00	–	cvelist
EUVD	EUVD-2020-17888	7 Oct 202500:30	–	euvd
ICS	GE Reason RT43X Clocks	5 Jan 202100:00	–	ics
NVD	CVE-2020-25197	18 Mar 202218:15	–	nvd
Prion	Code injection	18 Mar 202218:15	–	prion
RedhatCVE	CVE-2020-25197	5 Feb 202516:52	–	redhatcve
Vulnrichment	CVE-2020-25197 GE Reason RT43X Clocks Code Injection	18 Mar 202218:00	–	vulnrichment

NVD

Vulners

Node

ge rt430_firmwareRange<08a06

AND

ge rt430Match-

Node

ge rt431_firmwareRange<08a06

AND

ge rt431Match-

Node

ge rt434_firmwareRange<08a06

AND

ge rt434Match-

[
  {
    "product": "Reason RT43X Clocks",
    "vendor": "GE",
    "versions": [
      {
        "lessThan": "08A06",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-005-03
gegridsolutions	www.gegridsolutions.com/app/DownloadFile.aspx

21 Nov 2024 05:17Current

9.2High risk

Vulners AI Score9.2

CVSS 3.18.8 - 9.8

CVSS 29

EPSS0.03556

SSVC

CWE-94