CVE-2020-25193

GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key

State: Published
Severity: 5.3 Medium
Published: Mar 18, 2022
Updated: Apr 16, 2025
Reserved: Sep 4, 2020

Description

By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	icscert

Weaknesses

CWE-321 Use of Hard-coded Cryptographic Key

Affected Products

Product	Versions
Reason RT43X ClocksGE	before 08A06Affected

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-005-03
https://www.gegridsolutions.com/app/DownloadFile.aspx?prod=RT430&type=21&file=5

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.