# cve.now: GE

The newest entries naming GE as an affected vendor (up to 200), of 33 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2024-6098](https://cve.now/CVE-2024-6098.md): PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling (CVSS 5.3)
- [CVE-2022-3092](https://cve.now/CVE-2022-3092.md): GE CIMPLICITY Out-of-bounds Write (CVSS 7.8)
- [CVE-2022-3084](https://cve.now/CVE-2022-3084.md): GE CIMPLICITY Access of Uninitialized Pointer (CVSS 7.8)
- [CVE-2022-2952](https://cve.now/CVE-2022-2952.md): GE CIMPLICITY Access of Uninitialized Pointer (CVSS 7.8)
- [CVE-2022-2948](https://cve.now/CVE-2022-2948.md): GE CIMPLICITY Heap-based Buffer Overflow (CVSS 7.8)
- [CVE-2022-2002](https://cve.now/CVE-2022-2002.md): GE CIMPLICITY Untrusted Pointer Dereference (CVSS 7.8)
- [CVE-2020-36549](https://cve.now/CVE-2020-36549.md): GE Voluson S8 Windows Operating System Patches privileges management (CVSS 8.8)
- [CVE-2020-36548](https://cve.now/CVE-2020-36548.md): GE Voluson S8 Service Browser users.cgi improper authentication (CVSS 5.9)
- [CVE-2020-36547](https://cve.now/CVE-2020-36547.md): GE Voluson S8 Service Browser hard-coded credentials (CVSS 5.9)
- [CVE-2021-27422](https://cve.now/CVE-2021-27422.md): GE UR family exposure of sensitive information to an unauthorized actor (CVSS 7.5)
- [CVE-2021-27426](https://cve.now/CVE-2021-27426.md): GE UR family insecure default variable initialization (CVSS 9.8)
- [CVE-2021-27430](https://cve.now/CVE-2021-27430.md): GE UR family hardcoded credentials (CVSS 8.4)
- [CVE-2021-27428](https://cve.now/CVE-2021-27428.md): GE UR family Unrestricted Upload of File with Dangerous Type (CVSS 9.8)
- [CVE-2021-27424](https://cve.now/CVE-2021-27424.md): GE UR family exposure of sensitive information to an unauthorized actor (CVSS 5.3)
- [CVE-2021-27420](https://cve.now/CVE-2021-27420.md): GE UR family input validation (CVSS 5.3)
- [CVE-2021-27418](https://cve.now/CVE-2021-27418.md): GE UR family input validation (CVSS 5.3)
- [CVE-2020-25193](https://cve.now/CVE-2020-25193.md): GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key (CVSS 5.3)
- [CVE-2020-25197](https://cve.now/CVE-2020-25197.md): GE Reason RT43X Clocks Code Injection (CVSS 9.8)
- [CVE-2021-31477](https://cve.now/CVE-2021-31477.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RPV311 14A03. (CVSS 6.3)
- [CVE-2020-6977](https://cve.now/CVE-2020-6977.md): A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. (no CVSS)
- [CVE-2019-10966](https://cve.now/CVE-2019-10966.md): In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal (no CVSS)
- [CVE-2018-17925](https://cve.now/CVE-2018-17925.md): Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identified in the third-party ActiveX (no CVSS)
- [CVE-2017-7908](https://cve.now/CVE-2017-7908.md): A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. (no CVSS)
- [CVE-2018-10615](https://cve.now/CVE-2018-10615.md): Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prio (no CVSS)
- [CVE-2018-10613](https://cve.now/CVE-2018-10613.md): Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and (no CVSS)
- [CVE-2018-10611](https://cve.now/CVE-2018-10611.md): Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to al (no CVSS)
- [CVE-2015-3976](https://cve.now/CVE-2015-3976.md): GE Multilink Cross-site Scripting (no CVSS)
- [CVE-2014-5409](https://cve.now/CVE-2014-5409.md): GE Hydran M2 Predictable Value Range from Previous Values (no CVSS)
- [CVE-2014-5419](https://cve.now/CVE-2014-5419.md): GE Multilink Use of Hard-coded Cryptographic Key (no CVSS)
- [CVE-2014-5418](https://cve.now/CVE-2014-5418.md): GE Multilink Uncontrolled Resource Consumption (no CVSS)
- [CVE-2014-2355](https://cve.now/CVE-2014-2355.md): GE Proficy HMI/SCADA CIMPLICITY CimView (no CVSS)
- [CVE-2014-0751](https://cve.now/CVE-2014-0751.md): GE Proficy HMI/SCADA Path Traversal (no CVSS)
- [CVE-2014-0750](https://cve.now/CVE-2014-0750.md): GE Proficy HMI/SCADA Path Traversal (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/ge
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.