CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0CVE-2020-16246 – GE Reason S20 Ethernet Switch
https://notcve.org/view.php?id=CVE-2020-16246
20 Oct 2020 — The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site and executed by the victim client. El Reason S20 Ethernet Switch afectado es vulnerable a un ataque de tipo cross-site scripting (XSS), lo que puede permitir a atacantes engañar a los usuarios para que sigan un e... • https://us-cert.cisa.gov/ics/advisories/icsa-20-266-02 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0CVE-2020-16242 – GE Reason S20 Ethernet Switch
https://notcve.org/view.php?id=CVE-2020-16242
25 Sep 2020 — The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts. El Reason S20 Ethernet Switch afectado es vulnerable a un ataque de tipo cross-site scripting (XSS), que pueden permitir a un atacante engañar a los usuarios de la aplicación para llevar a cabo acciones críticas de la aplicación que incluyen, pero no los limi... • https://us-cert.cisa.gov/ics/advisories/icsa-20-266-02 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 1%CPEs: 4EXPL: 0CVE-2019-18267
https://notcve.org/view.php?id=CVE-2019-18267
18 Dec 2019 — An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site scripting vulnerability that may allow session hijacking, disclosure of sensitive data, cross-site request forgery (CSRF) attacks, and remote code execution. Se detectó un problema en GE S2020/S2020G Fast Switch 6185... • https://www.us-cert.gov/ics/advisories/icsa-19-351-01 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •