HIGH🇵🇱 Wersja polska

CVE-2021-27422

CVSS 7.5v3.1pub. 2022-03-23upd. 2024-11-21

GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Ge Multilin B30

    HW
    Ge
    wszystkie wersje

  • Ge Multilin B30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin B90

    HW
    Ge
    wszystkie wersje

  • Ge Multilin B90 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin C30

    HW
    Ge
    wszystkie wersje

  • Ge Multilin C30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin C60

    HW
    Ge
    wszystkie wersje

  • Ge Multilin C60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin C70

    HW
    Ge
    wszystkie wersje

  • Ge Multilin C70 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin C95

    HW
    Ge
    wszystkie wersje

  • Ge Multilin C95 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin D30

    HW
    Ge
    wszystkie wersje

  • Ge Multilin D30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin D60

    HW
    Ge
    wszystkie wersje

  • Ge Multilin D60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin F35

    HW
    Ge
    wszystkie wersje

  • Ge Multilin F35 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin F60

    HW
    Ge
    wszystkie wersje

  • Ge Multilin F60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin G30

    HW
    Ge
    wszystkie wersje

  • Ge Multilin G30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin G60

    HW
    Ge
    wszystkie wersje

  • Ge Multilin G60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin L30

    HW
    Ge
    wszystkie wersje

  • Ge Multilin L30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin L60

    HW
    Ge
    wszystkie wersje

  • Ge Multilin L60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin L90

    HW
    Ge
    wszystkie wersje

  • Ge Multilin L90 Firmware

    OS
    Ge
    < 8.10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-27426CRITICAL9.8ten sam produkt

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling o...

CVE-2021-27428CRITICAL9.8ten sam produkt

GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration too...

CVE-2021-27418MEDIUM5.3ten sam produkt

GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails t...

CVE-2021-27420MEDIUM5.3ten sam produkt

GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported ...

CVE-2021-27424MEDIUM5.3ten sam produkt

GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE...