Description
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| General Electric | Reason S20 Ethernet Switch | S2020 – ≤ 07A06, S2024 – ≤ 07A06 | — |
Advisories 1
- ICSA-20-266-02 GE Reason S20 Ethernet Switch CISA ICS & IT advisories · Sep 22, 2020