GE vulnerabilities
33 CVEs and advisories name GE as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-6098PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling
- CVE-2022-3092GE CIMPLICITY Out-of-bounds Write
- CVE-2022-3084GE CIMPLICITY Access of Uninitialized Pointer
- CVE-2022-2952GE CIMPLICITY Access of Uninitialized Pointer
- CVE-2022-2948GE CIMPLICITY Heap-based Buffer Overflow
- CVE-2022-2002GE CIMPLICITY Untrusted Pointer Dereference
- CVE-2020-36549GE Voluson S8 Windows Operating System Patches privileges management
- CVE-2020-36548GE Voluson S8 Service Browser users.cgi improper authentication
- CVE-2020-36547GE Voluson S8 Service Browser hard-coded credentials
- CVE-2021-27422GE UR family exposure of sensitive information to an unauthorized actor
- CVE-2021-27426GE UR family insecure default variable initialization
- CVE-2021-27430GE UR family hardcoded credentials
- CVE-2021-27428GE UR family Unrestricted Upload of File with Dangerous Type
- CVE-2021-27424GE UR family exposure of sensitive information to an unauthorized actor
- CVE-2021-27420GE UR family input validation
- CVE-2021-27418GE UR family input validation
- CVE-2020-25193GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key
- CVE-2020-25197GE Reason RT43X Clocks Code Injection
- CVE-2021-31477This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RPV311 14A03.
- CVE-2020-6977A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices.
- CVE-2019-10966In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal
- CVE-2018-17925Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identified in the third-party ActiveX
- CVE-2017-7908A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior.
- CVE-2018-10615Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prio
- CVE-2018-10613Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and
- CVE-2018-10611Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to al
- CVE-2015-3976GE Multilink Cross-site Scripting
- CVE-2014-5409GE Hydran M2 Predictable Value Range from Previous Values
- CVE-2014-5419GE Multilink Use of Hard-coded Cryptographic Key
- CVE-2014-5418GE Multilink Uncontrolled Resource Consumption