Back to Database
Status published
Medium
CVE-2020-25193
GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key
Vulnerability Description
By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-25193
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Tom Westenberg of Thales UK reported these vulnerabilities to GE.
References
More from GE
View All →CVE-2022-3092
GE CIMPLICITY Out-of-bounds Write
High
7.8
CVE-2022-3084
GE CIMPLICITY Access of Uninitialized Pointer
High
7.8
CVE-2022-2952
GE CIMPLICITY Access of Uninitialized Pointer
High
7.8
CVE-2022-2948
GE CIMPLICITY Heap-based Buffer Overflow
High
7.8
CVE-2022-2002
GE CIMPLICITY Untrusted Pointer Dereference
High
7.8
Affected Vendor
Affected Software
Reason RT43X Clocks
Vulnerable Versions:
unspecified
Timeline
Official Publish:
March 18th, 2022
Last Modified:
April 16th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N