CVE-2019-18267
Published: Dec 18, 2019
Modified: Aug 5, 2024
Description
An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site scripting vulnerability that may allow session hijacking, disclosure of sensitive data, cross-site request forgery (CSRF) attacks, and remote code execution.
| Vendor | Product | Versions |
|---|---|---|
n/a | GE S2020/S2020G Fast Switch 61850 | affected S2020/S2020G Fast Switch 61850 Versions 07A03 and prior |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now