Approved changes feed: RSS · Atom

cpe:2.3:a:ge:reason_rt43x_clocks:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGe (889d94a1-c6d7-5857-8fdf-da634b4dfc4f)
ProductReason Rt43X Clocks (cbcc3a85-79ea-59bc-bad5-bab656818658)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-25197 vulnerable 2026-06-08 05:22:36.422612 GE Reason RT43X Clocks Code Injection
CRITICAL (9.8)
A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.
Published: 2022-03-18T18:00:34.000Z
Updated: 2025-04-16T16:41:36.185Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25193 vulnerable 2026-06-08 05:22:36.404719 GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key
MEDIUM (5.3)
By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection.
Published: 2022-03-18T18:00:35.000Z
Updated: 2025-04-16T16:41:25.123Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.