CVE-2020-16242

6.1 mediumEPSS 0.7%

Medium (6.1) in ge. EPSS 0.7% chance of exploitation in the next 30 days.

The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-09-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ge:s2020_firmware
ge:s2024_firmware

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-266-02
https://us-cert.cisa.gov/ics/advisories/icsa-20-266-02

Check your stack JSON