CVE-2020-25197

Name of the Vulnerable Software and Affected Versions GE Reason RT430, RT431, and RT434 GNSS clocks versions prior to 08A06

Description The issue is related to a code injection vulnerability. This vulnerability could allow a remote attacker to execute arbitrary code on the system. The vulnerability exists in one of the webpages of the affected devices.

Recommendations For GE Reason RT430, RT431, and RT434 GNSS clocks versions prior to 08A06, update the firmware to version 08A06 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable webpage to minimize the risk of exploitation.