Skip to content
OpenAdvisories

Vendor

GE

33 known vulnerabilities.

Products

UR family 6 CIMPLICITY 5 Multilink ML800/1200/1600/2400 3 ML810/3000/3100 series switch 3 Voluson S8 3 MDS PulseNET and MDS PulseNET Enterprise 3 Proficy HMI/SCADA–CIMPLICITY 3 Proficy Process Systems with CIMPLICITY 2 Reason RT43X Clocks 2 Hydran M2, containing the 17046 Ethernet option 1 GE Ultrasound Products 1 iFix 1 IGS 1 Aestiva and Aespire 1 UR bootloader binary 1 Reason RPV311 1 GE Communicator 1 Proficy HMI/SCADA–CIMPLICITY with Proficy Historian 4.5 or prior installed 0 Proficy HMI/SCADA–iFIX with Proficy Historian 4.5 or prior installed 0 SNMP/Web Interface adapter firmware 0 Multilink ML810/3000/3100 series switch 0 MACTek’s Bullet DTM 0 GE’s Vector DTM 0 GE’s SVi1000 Positioner DTM 0 GE’s SVI II AP Positioner DTM 0 GE’s 12400 Level Transmitter DTM 0 Hydran M2 0 Proficy human-machine interface/supervisory control and data acquisition (HMI/SCADA) DNP3 I/O Driver (“DNP”) 0 Proficy HMI/SCADA—iFIX or CIMPLICITY servers with the vulnerable I/O Driver installed (this includes iFIX or CIMPLICITY installations that are part of Proficy Process Systems) 0 ML800 Switch 0 ML810 Switch 0 ML1200 Switch 0 ML1600 Switch 0 ML2400 Switch 0 ML3000 Switch 0 ML3100 Switch 0 Proficy Plant Applications 0 Proficy Historian 0 Proficy HMI/SCADA - CIMPLICITY If Historian is installed 0 Proficy HMI/SCADA - iFIX If Historian is installed 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-27426

    GE UR family insecure default variable initialization

    GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.

    GE UR family
  • Critical 9.8
    CVE-2021-27428

    GE UR family Unrestricted Upload of File with Dangerous Type

    GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate use…

    GE UR family
  • Critical 9.8
    CVE-2020-25197

    GE Reason RT43X Clocks Code Injection

    A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.

    GE Reason RT43X Clocks
  • Critical 10.0
    CVE-2014-5419

    GE Multilink Use of Hard-coded Cryptographic Key

    GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier use the same RSA private key across different customers' installations, which makes it eas…

    GE ML810/3000/3100 series switch Multilink ML800/1200/1600/2400