GCVE - cpe:2.3:h:ge:s2020:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:ge:s2020:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Ge (`889d94a1-c6d7-5857-8fdf-da634b4dfc4f`)
Product	S2020 (`dc58690f-ad7c-5e6f-b27f-5da75eb95a96`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-16246`	not_vulnerable	2026-06-08 05:19:27.844407	GE Reason S20 Ethernet Switch The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site and executed by the victim client. Published: 2020-10-20T15:00:40.583Z Updated: 2024-09-17T00:47:00.232Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-266-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16242`	not_vulnerable	2026-06-08 05:19:27.839546	GE Reason S20 Ethernet Switch The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts. Published: 2020-09-25T17:37:26.885Z Updated: 2024-09-17T00:40:34.187Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-266-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-18267`	not_vulnerable	2026-06-08 05:13:11.323049	Details available An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site scripting vulnerability that may allow session hijacking, disclosure of sensitive data, cross-site request forgery (CSRF) attacks, and remote code execution. Published: 2019-12-18T19:37:46.000Z Updated: 2024-08-05T01:47:14.086Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsa-19-351-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.