Description
By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GE | Reason RT43X Clocks | unspecified – < 08A06 | 08A06 |
Advisories 1
- ICSA-21-005-03 GE Reason RT43X Clocks CISA ICS & IT advisories · Jan 5, 2021