CVE-2020-25193CWE-321

GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key

Medium · published March 18, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
58.0
In the wild
Unconfirmed
What it is

By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00859 · 58.0th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2022-03-18T18:00Z
EPSS history
Timeline
  • 18 MAR 18:00Z
    GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key
    cvelistv5