S2020 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:ge:s2020_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Ge (889d94a1-c6d7-5857-8fdf-da634b4dfc4f) |
|---|---|
| Product | S2020 Firmware (5fa6540e-bbb6-5f02-bf51-fc3342a317af) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-16246 |
vulnerable | 2026-06-08 05:19:27.844381 |
GE Reason S20 Ethernet Switch
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site and executed by the victim client.
Published: 2020-10-20T15:00:40.583Z
Updated: 2024-09-17T00:47:00.232Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16242 |
vulnerable | 2026-06-08 05:19:27.838713 |
GE Reason S20 Ethernet Switch
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts.
Published: 2020-09-25T17:37:26.885Z
Updated: 2024-09-17T00:40:34.187Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18267 |
vulnerable | 2026-06-08 05:13:11.322243 |
Details available
An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site scripting vulnerability that may allow session hijacking, disclosure of sensitive data, cross-site request forgery (CSRF) attacks, and remote code execution.
Published: 2019-12-18T19:37:46.000Z
Updated: 2024-08-05T01:47:14.086Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.