{"id":"CVE-2020-25197","aliases":["EUVD-2020-17888","GHSA-84hv-5mf8-83vj"],"status":"published","title":"GE Reason RT43X Clocks Code Injection","description":"A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 \u0026 RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.03172,"percentile":0.88221,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2022-03-18T18:00:34Z","modified":"2026-06-17T03:06:33Z","products":[{"vendor":"ge","product":"reason rt43x clocks"},{"vendor":"ge","product":"rt430_firmware"},{"vendor":"ge","product":"rt431_firmware"},{"vendor":"ge","product":"rt434_firmware"}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-21-005-03","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://www.gegridsolutions.com/app/DownloadFile.aspx?prod=RT430\u0026type=21\u0026file=5","tags":["x_refsource_CONFIRM","x_transferred","Permissions Required"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25197"},{"url":"https://github.com/advisories/GHSA-84hv-5mf8-83vj"}],"sources":{"cve":[{"id":"CVE-2020-25197","title":"GE Reason RT43X Clocks Code Injection","description":"A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 \u0026 RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.","status":"published","published":"2022-03-18T18:00:34Z","modified":"2025-04-16T16:41:36.185Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:35:48.52216Z"}],"euvd":[{"id":"EUVD-2020-17888","description":"A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 \u0026 RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.","status":"published","published":"2022-03-18T18:00:34Z","modified":"2025-04-16T16:41:36Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:23.396616Z"}],"ghsa":[{"id":"GHSA-84hv-5mf8-83vj","title":"A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 \u0026 RT434...","description":"A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 \u0026 RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.","status":"published","published":"2022-03-19T00:00:59Z","modified":"2023-01-27T05:01:00Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:41:47.408375Z"}],"nvd":[{"id":"CVE-2020-25197","description":"A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 \u0026 RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.","status":"published","published":"2022-03-18T18:15:09.417Z","modified":"2026-06-17T03:06:33.9Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:06:46.951463Z"}]}}