CRITICAL🇵🇱 Wersja polska

CVE-2021-27428

CVSS 9.8v3.1pub. 2022-03-23upd. 2024-11-21

GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without appropriate privileges. The weakness is assessed, and mitigation is implemented in firmware Version 8.10.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Ge Multilin B30

    HW
    Ge
    all versions

  • Ge Multilin B30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin B90

    HW
    Ge
    all versions

  • Ge Multilin B90 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin C30

    HW
    Ge
    all versions

  • Ge Multilin C30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin C60

    HW
    Ge
    all versions

  • Ge Multilin C60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin C70

    HW
    Ge
    all versions

  • Ge Multilin C70 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin C95

    HW
    Ge
    all versions

  • Ge Multilin C95 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin D30

    HW
    Ge
    all versions

  • Ge Multilin D30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin D60

    HW
    Ge
    all versions

  • Ge Multilin D60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin F35

    HW
    Ge
    all versions

  • Ge Multilin F35 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin F60

    HW
    Ge
    all versions

  • Ge Multilin F60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin G30

    HW
    Ge
    all versions

  • Ge Multilin G30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin G60

    HW
    Ge
    all versions

  • Ge Multilin G60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin L30

    HW
    Ge
    all versions

  • Ge Multilin L30 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin L60

    HW
    Ge
    all versions

  • Ge Multilin L60 Firmware

    OS
    Ge
    < 8.10

  • Ge Multilin L90

    HW
    Ge
    all versions

  • Ge Multilin L90 Firmware

    OS
    Ge
    < 8.10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-27426CRITICAL9.8PL ✓same product

GE Multilin UR IED — niemożliwość wyłączenia trybu fabrycznego

CVE-2021-27422HIGH7.5same product

GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It a...

CVE-2021-27418MEDIUM5.3same product

GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails t...

CVE-2021-27420MEDIUM5.3same product

GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported ...

CVE-2021-27424MEDIUM5.3same product

GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE...