Critical severity9.8NVD Advisory· Published Mar 18, 2022· Updated Jun 17, 2026

CVE-2020-25197

Description

A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ge/Rt430 Firmware
cpe:2.3:o:ge:rt430_firmware:*:*:*:*:*:*:*:*
Range: <08a06
Ge/Rt431 Firmware
cpe:2.3:o:ge:rt431_firmware:*:*:*:*:*:*:*:*
Range: <08a06
Ge/Rt434 Firmware
cpe:2.3:o:ge:rt434_firmware:*:*:*:*:*:*:*:*
Range: <08a06
Ge/Reason RT430llm-fuzzy
Range: <08A06
GE/Reason RT43X Clocksv5
Range: unspecified

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-21-005-03nvdMitigationThird Party AdvisoryUS Government Resource
www.gegridsolutions.com/app/DownloadFile.aspxnvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000