Description
A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GE | Reason RT43X Clocks | unspecified – < 08A06 | 08A06 |
Advisories 1
- ICSA-21-005-03 GE Reason RT43X Clocks CISA ICS & IT advisories · Jan 5, 2021