Vendor
GE
129 known vulnerabilities in products by GE, 0 of them actively exploited (CISA KEV).
Key figures
129
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
36
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-0755 | PTC ThingWorx Edge C-SDK: Improper Validation of Array Index | 9.8 | |
| Critical | CVE-2020-27265 | GE Industrial Gateway Server: Stack-based Buffer Overflow | 9.8 | |
| High | CVE-2016-0861 | GE Ups SNMP Web Adapter Firmware: security vulnerability | 8.8 | |
| Critical | CVE-2018-5473 | GE D60 Line Distance Relay: Improper Restriction of Operations within the Bounds of a Memory Buffer | 9.8 | |
| Critical | CVE-2018-10611 | GE MDS PulseNET and MDS PulseNET Enterprise: Improper Authentication | 9.8 | |
| Critical | CVE-2017-14002 | General Electric Infinia Hawkeye 4 Firmware: Improper Authentication | 9.8 | |
| Critical | CVE-2020-27263 | ThingWorx Kepware Server: Heap-based Buffer Overflow | 9.1 | |
| Critical | CVE-2020-27267 | ThingWorx Kepware Server: Use After Free | 9.1 | |
| Critical | CVE-2022-2825 | Kepware KEPServerEX: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2018-5475 | GE D60 Line Distance Relay: Stack-based Buffer Overflow | 9.8 | |
| High | CVE-2018-10613 | GE MDS PulseNET and MDS PulseNET Enterprise: Improper Restriction of XML External Entity Reference | 7.5 | |
| Critical | CVE-2023-0754 | PTC ThingWorx Edge C-SDK: Integer Overflow or Wraparound | 9.8 | |
| Critical | CVE-2020-25197 | GE Reason RT43X Clocks Code Injection | 9.8 | |
| Critical | CVE-2016-2310 | GE MultiLink Firmware: Hard-coded Credentials | 9.8 | |
| Critical | CVE-2022-2848 | Kepware KEPServerEX: Heap-based Buffer Overflow | 9.1 | |
| High | CVE-2012-6663 | GE D200 Firmware: security vulnerability | 7.5 | |
| Critical | CVE-2017-14008 | GE Centricity PACS RA1000: Improper Authentication | 9.8 | |
| Medium | CVE-2016-0862 | GE SNMP/Web Adapter Firmware: security vulnerability | 6.5 | |
| Critical | CVE-2016-5788 | General Electric Bently Nevada 3500/22m Serial Firmware: security vulnerability | 10.0 | |
| Critical | CVE-2020-12017 | GE Grid Solutions Reason RT Clocks: Missing Authentication for Critical Function | 9.8 | |
| Critical | CVE-2018-15362 | GE Proficy Cimplicity GDS: XML External Entity (XXE) | 9.1 | |
| High | CVE-2018-8867 | General Electric PACSystems CPU320 Firmware: Improper Input Validation | 7.5 | |
| Critical | CVE-2008-0174 | GE Proficy Real-time Information Portal: Privilege Escalation | 9.8 | |
| Critical | CVE-2017-14004 | Gemnet License Server: Improper Authentication | 9.8 | |
| Critical | CVE-2017-14006 | GE Xeleris: Improper Authentication | 9.8 |