GE Update
3088Warning Date
Severity Level
Warning Number
Target Sector
7 January, 2021
● Critical
2021-2281
Communication and information technology - Transportation - Water and Utilities - HealthCare - Manufacturing
Description:
GE has released a security update to address two vulnerabilities in the following versions of GNSS clocks:
- RT430, RT431 & RT434
- All firmware versions prior to version 08A06
Threats:
Remote attacker could exploit these vulnerabilities by doing the following:
- Intercept and decrypt encrypted traffic
- Execute arbitrary code
Best practice and Recommendations:
The CERT team encourages users to review GE security advisory and apply the necessary updates: