GGE

Products

Exploited and recent CVEs

• CVE-2024-6098 Medium 5.3 PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling 0.4%
• CVE-2022-3092 High 7.8 GE CIMPLICITY Out-of-bounds Write 0.2%
• CVE-2022-3084 High 7.8 GE CIMPLICITY Access of Uninitialized Pointer 0.2%
• CVE-2022-2952 High 7.8 GE CIMPLICITY Access of Uninitialized Pointer 0.2%
• CVE-2022-2948 High 7.8 GE CIMPLICITY Heap-based Buffer Overflow 0.2%
• CVE-2022-2002 High 7.8 GE CIMPLICITY Untrusted Pointer Dereference 0.3%
• CVE-2020-36549 High 8.8 GE Voluson S8 Windows Operating System Patches privileges management 0.2%
• CVE-2020-36548 Medium 5.9 GE Voluson S8 Service Browser users.cgi improper authentication 0.2%
• CVE-2020-36547 Medium 5.9 GE Voluson S8 Service Browser hard-coded credentials 0.2%
• CVE-2021-27422 High 7.5 GE UR family exposure of sensitive information to an unauthorized actor 0.7%
• CVE-2021-27426 Critical 9.8 GE UR family insecure default variable initialization 1.2%
• CVE-2021-27430 High 8.4 GE UR family hardcoded credentials 0.2%
• CVE-2021-27428 Critical 9.8 GE UR family Unrestricted Upload of File with Dangerous Type 1.2%
• CVE-2021-27424 Medium 5.3 GE UR family exposure of sensitive information to an unauthorized actor 0.9%
• CVE-2021-27420 Medium 5.3 GE UR family input validation 1.1%
• CVE-2021-27418 Medium 5.3 GE UR family input validation 0.6%
• CVE-2020-25193 Medium 5.3 GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key 0.9%
• CVE-2020-25197 Critical 9.8 GE Reason RT43X Clocks Code Injection 3.2%
• CVE-2021-31477 Medium 6.3 This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RPV311 14A03. Authentication is not required to exploit this vulnerability. The specific fla 2.6%
• CVE-2020-6977 Unrated A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, resu 0.4%