Description
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site and executed by the victim client.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| General Electric | Reason S20 Ethernet Switch | S2020 – ≤ 07A06, S2024 – ≤ 07A06 | — |
Advisories 1
- ICSA-20-266-02 GE Reason S20 Ethernet Switch CISA ICS & IT advisories · Sep 22, 2020