General Electric vulnerabilities

7 vulnerabilities

Known vulnerabilities in General Electric products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.

Products

4
6.1CVE-2020-16242ges2020_firmware+2
EPSS score
0.71%
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts.6.1CVE-2020-16246ges2020_firmware+2
EPSS score
0.69%
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site and executed by the victim client.9.8CVE-2022-21798general electricproficy cimplicity
EPSS score
0.61%
The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.7.8CVE-2022-23921geproficy_cimplicitiy+1
EPSS score
0.21%
Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server is not already running a project, and the server is licensed for multiple projects.7.3CVE-2023-0898gemicom_s1_agile+1
EPSS score
0.26%
General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application.9.8CVE-2023-0755gedigital_industrial_gateway_server+14
EPSS score
11.78%
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.9.8CVE-2023-0754gedigital_industrial_gateway_server+14
EPSS score
2.94%
The affected products are vulnerable to an integer overflow or wraparound, which could  allow an attacker to crash the server and remotely execute arbitrary code.