Ge s2020 Firmware vulnerabilities

3 CVEs affecting Ge s2020 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-16246, published 2020-10-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-18267, published 2019-12-18. Medium severity, CVSS 5.4. EPSS: 1.6% chance of exploitation in the next 30 days. An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that…
CVE-2020-16242, published 2020-09-25. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include,…
CVE-2020-16246, published 2020-10-20. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious…