Skip to content
OpenAdvisories
Medium ICSA-20-266-02 2 CVEs

GE Reason S20 Ethernet Switch

Published Sep 22, 2020 · Updated Sep 22, 2020

Vendor: General Electric (GE) Product: S2020 Product: S2024

Summary

Successful exploitation of these vulnerabilities could allow unauthorized accounts manipulation and allow for remote code execution.

Vulnerabilities 2

  • Unscored —
    CVE-2020-16242

    GE Reason S20 Ethernet Switch

    The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts.

    General Electric Reason S20 Ethernet Switch
  • Unscored —
    CVE-2020-16246

    GE Reason S20 Ethernet Switch

    The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicio…

    General Electric Reason S20 Ethernet Switch

Revision history

  1. #1

    ICSA-20-266-02 GE Reason S20 Ethernet Switch

References