CVE-2020-25193
By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection.
Published:Mar 18, 2022
Last Modified:Apr 16, 2025
EPS:Mar 18, 2022
EPSS Score:0.00174
CVSS Score:5.3
Affected Products
Vendor
Product
Action
Vendor
Ge
Product
Rt430
Ge
Rt430
Vendor
Ge
Product
Rt430 Firmware
Ge
Rt430 Firmware
Vendor
Ge
Product
Rt431
Ge
Rt431
Vendor
Ge
Product
Rt431 Firmware
Ge
Rt431 Firmware
Vendor
Ge
Product
Rt434
Ge
Rt434
Vendor
Ge
Product
Rt434 Firmware
Ge
Rt434 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
