GE Updates
3399Warning Date
Severity Level
Warning Number
Target Sector
23 September, 2020
● High
2020-1820
Energy - Water and Utilities - Manufacturing
Description:
GE has released security updates to address multiple vulnerabilities in the following products:
- GE Digital APM Classic
- Versions 4.4 and prior
- Reason S20 managed Ethernet switches
- S2020, All firmware versions prior to 07A06
- S2024, All firmware versions prior to 07A06
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Sensitive information disclosure.
- Cross-site scripting (XSS) attack.
Best practice and Recommendations:
The CERT team encourages users to review GE security advisory and apply the necessary updates: