Approved changes feed: RSS · Atom

cpe:2.3:h:ge:s2020g:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorGe (889d94a1-c6d7-5857-8fdf-da634b4dfc4f)
ProductS2020G (d165a605-0068-5aea-9348-568151c1774a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-18267 not_vulnerable 2026-06-08 05:13:11.324513 Details available
An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site scripting vulnerability that may allow session hijacking, disclosure of sensitive data, cross-site request forgery (CSRF) attacks, and remote code execution.
Published: 2019-12-18T19:37:46.000Z
Updated: 2024-08-05T01:47:14.086Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.