The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts.
[
{
"product": "Reason S20 Ethernet Switch",
"vendor": "General Electric",
"versions": [
{
"lessThanOrEqual": "07A06",
"status": "affected",
"version": "S2020",
"versionType": "custom"
},
{
"lessThanOrEqual": "07A06",
"status": "affected",
"version": "S2024",
"versionType": "custom"
}
]
}
]