MEDIUM🇵🇱 Wersja polska

CVE-2021-27420

CVSS 5.3v3.1pub. 2022-03-23upd. 2024-11-21

GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsupported HTTP requests. When unresponsive, the web server is inaccessible. By itself, this is not particularly significant as the relay remains effective in all other functionality and communication channels.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

  • Ge Multilin B30

    HW
    Ge
    all versions

  • Ge Multilin B30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin B90

    HW
    Ge
    all versions

  • Ge Multilin B90 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin C30

    HW
    Ge
    all versions

  • Ge Multilin C30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin C60

    HW
    Ge
    all versions

  • Ge Multilin C60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin C70

    HW
    Ge
    all versions

  • Ge Multilin C70 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin C95

    HW
    Ge
    all versions

  • Ge Multilin C95 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin D30

    HW
    Ge
    all versions

  • Ge Multilin D30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin D60

    HW
    Ge
    all versions

  • Ge Multilin D60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin F35

    HW
    Ge
    all versions

  • Ge Multilin F35 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin F60

    HW
    Ge
    all versions

  • Ge Multilin F60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin G30

    HW
    Ge
    all versions

  • Ge Multilin G30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin G60

    HW
    Ge
    all versions

  • Ge Multilin G60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin L30

    HW
    Ge
    all versions

  • Ge Multilin L30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin L60

    HW
    Ge
    all versions

  • Ge Multilin L60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin L90

    HW
    Ge
    all versions

  • Ge Multilin L90 Firmware

    OS
    Ge
    < 8.10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-27426CRITICAL9.8PL ✓same product

GE Multilin UR IED — niemożliwość wyłączenia trybu fabrycznego

CVE-2021-27428CRITICAL9.8PL ✓same product

Nieautoryzowana aktualizacja firmware w GE Multilin UR IED

CVE-2021-27422HIGH7.5same product

GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It a...

CVE-2021-27418MEDIUM5.3same product

GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails t...

CVE-2021-27424MEDIUM5.3same product

GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE...