GE S2020/S2020G Fast Switch 61850 Cross-Site Scripting Vulnerability

The GE S2020/S2020G Fast Switch 61850 is a managed Ethernet switch. A cross-site scripting vulnerability exists in the GE S2020/S2020G Fast Switch 61850, which can be exploited by an attacker to inject arbitrary code...

PT-2019-15305

Name of the Vulnerable Software and Affected Versions GE S2020/S2020G Fast Switch 61850 versions 07A03 and prior Description The issue allows an attacker to inject arbitrary Javascript in a specially crafted HTTP request, which may be reflected back in the HTTP response. This can lead to a stored...

CVE-2019-18267: Improper Neutralization of Input During Web Page Generation

An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site...

General Electric S2020/S2020G Fast Switch 61850 CVE-2019-18267 Cross Site Scripting Vulnerability

Description General Electric S2020/S2020G Fast Switch is is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

GE S2020/S2020G Fast Switch 61850

1. EXECUTIVE SUMMARY CVSS v3 4.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GE Equipment: GE S2020/S2020G Fast Switch 61850 Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to inject arbitrary code...