Ge vulnerabilities, page 3

127 vulnerabilities

Known vulnerabilities in Ge products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 143 products.

5.3MediumCVE-2020-16240ge · asset_performance_management_classicge asset_performance_management_classicGE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR) vulnerability allows user account data to be downloaded in JavaScript object notation (JSON) format by users who should not have access to such functionality. An attacker can download sensitive data related to user accounts without having the proper privileges.EPSS0.90%7.2HighCVE-2020-16244ge · asset_performance_management_classicge asset_performance_management_classicGE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible to decrypt passwords. This design flaw, along with the IDOR vulnerability, puts the entire platform at high risk because an authenticated user can retrieve all user account data and then retrieve the actual passwords.EPSS0.65%6.1MediumCVE-2020-16242ge · s2020_firmware +2 moreGE Reason S20 Ethernet SwitchThe affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts.EPSS0.71%6.1MediumCVE-2020-16246ge · s2020_firmware +2 moreGE Reason S20 Ethernet SwitchThe affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site and executed by the victim client.EPSS0.69%8.8HighCVE-2020-36549ge · voluson_s8_firmwareGE Voluson S8 Windows Operating System Patches privileges managementA vulnerability classified as critical was found in GE Voluson S8. Affected is the underlying Windows XP operating system. Missing patches might introduce an excessive attack surface. Access to the local network is required for this attack to succeed.EPSS0.23%7.8HighCVE-2020-36548ge · voluson_s8_firmwareGE Voluson S8 Service Browser users.cgi improper authenticationA vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host.EPSS0.23%7.8HighCVE-2020-36547ge · voluson_s8_firmwareGE Voluson S8 Service Browser hard-coded credentialsA vulnerability was found in GE Voluson S8. It has been rated as critical. This issue affects the Service Browser which itroduces hard-coded credentials. Attacking locally is a requirement. It is recommended to change the configuration settings.EPSS0.22%5.3MediumCVE-2020-25193ge · reason rt43x clocks +3 moreGE Reason RT43X Clocks Use of Hard-coded Cryptographic KeyBy having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection.EPSS0.86%9.8CriticalCVE-2020-25197ge · reason rt43x clocks +3 moreGE Reason RT43X Clocks Code InjectionA code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.EPSS3.17%9.1CriticalCVE-2020-27267ge · industrial_gateway_server +6 morege industrial_gateway_serverKEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.EPSS5.00%9.1CriticalCVE-2020-27263ge · industrial_gateway_server +6 morege industrial_gateway_serverKEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.EPSS5.00%9.8CriticalCVE-2020-27265ge · industrial_gateway_server +6 morege industrial_gateway_serverKEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions are vulnerable to a stack-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and remotely execute code.EPSS10.49%7.2HighCVE-2020-6977ge · ge ultrasound productsge ge ultrasound productsA restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, resulting in access to the underlying operating system. Affected devices include the following GE Ultrasound Products: Vivid products - all versions; LOGIQ - all versions not including LOGIQ 100 Pro; Voluson - all versions; Versana Essential - all versions; Invenia ABUS Scan station - all versions; Venue - all versions not including Venue 40 R1-3 and Venue 50 R4-5EPSS0.43%6.7MediumCVE-2020-6992ge · cimplicityge cimplicityA local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability could allow an adversary to modify the system, leading to the arbitrary execution of code. This vulnerability is only exploitable if an attacker has access to an authenticated session. GE Digital CIMPLICITY v11.0, released January 2020, contains mitigation for this local privilege escalation vulnerability. GE Digital recommends all users upgrade to GE CIMPLICITY v11.0 or newer.EPSS0.39%9.8CriticalCVE-2020-12017ge · rt430_firmware +2 morege rt430_firmwareGE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05. The device’s vulnerability in the web application could allow multiple unauthenticated attacks that could cause serious impact. The vulnerability may allow an unauthenticated attacker to execute arbitrary commands and send a request to a specific URL that could cause the device to become unresponsive. The unauthenticated attacker may change the password of the 'configuration' user account, allowing the attacker to modify the configuration of the device via the web interface using the new password. This vulnerability may also allow an unauthenticated attacker to bypass the authentication required to configure the device and reboot the system.EPSS2.33%6.9MediumCVE-2014-2355ge · intelligent_platforms_proficy_hmi\/scada_cimplicity +1 moreGE Proficy HMI/SCADA CIMPLICITY CimViewThe (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.EPSS0.65%7.5HighCVE-2014-0751ge · intelligent_platforms_proficy_hmi\%2fscada_cimplicity +4 moreGE Proficy HMI/SCADA Path TraversalThe CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could allow the attacker to execute arbitrary code.EPSS3.08%7.5HighCVE-2014-0750ge · intelligent_platforms_proficy_hmi\%2fscada_cimplicity +4 moreGE Proficy HMI/SCADA Path TraversalDirectory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.EPSS69.83%5MediumCVE-2014-9203ge · 12400_level_transmitter_device_type_manager +3 morege 12400_level_transmitter_device_type_managerBuffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0, GE Vector DTM 1.00.0, GE SVi1000 Positioner DTM 1.00.0, GE SVI II AP Positioner DTM 2.00.1, and GE 12400 Level Transmitter DTM 1.00.0, allows remote attackers to cause a denial of service (DTM outage) via crafted packets.EPSS1.80%7.8HighCVE-2014-5418ge · ml810/3000/3100 series switch +8 moreGE Multilink Uncontrolled Resource ConsumptionGE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.EPSS3.19%