Lucene search

[email protected]CVE-2021-27422

HistoryMar 23, 2022 - 8:15 p.m.

CVE-2021-27422

2022-03-2320:15:00

CWE-319

[email protected]

web.nvd.nist.gov

cve-2021-27422

ge ur firmware

sensitive information exposure

http protocol

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

51.4%

JSON

GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.

CPENameOperatorVersion
ge:multilin_b30_firmwarege multilin b30 firmwarelt8.10
ge:multilin_b90_firmwarege multilin b90 firmwarelt8.10
ge:multilin_c60_firmwarege multilin c60 firmwarelt8.10
ge:multilin_c70_firmwarege multilin c70 firmwarelt8.10
ge:multilin_c95_firmwarege multilin c95 firmwarelt8.10
ge:multilin_d30_firmwarege multilin d30 firmwarelt8.10
ge:multilin_d60_firmwarege multilin d60 firmwarelt8.10
ge:multilin_f35_firmwarege multilin f35 firmwarelt8.10
ge:multilin_f60_firmwarege multilin f60 firmwarelt8.10
ge:multilin_g30_firmwarege multilin g30 firmwarelt8.10

CPE	Name	Operator	Version
ge:multilin_b30_firmware	ge multilin b30 firmware	lt	8.10
ge:multilin_b90_firmware	ge multilin b90 firmware	lt	8.10
ge:multilin_c60_firmware	ge multilin c60 firmware	lt	8.10
ge:multilin_c70_firmware	ge multilin c70 firmware	lt	8.10
ge:multilin_c95_firmware	ge multilin c95 firmware	lt	8.10
ge:multilin_d30_firmware	ge multilin d30 firmware	lt	8.10
ge:multilin_d60_firmware	ge multilin d60 firmware	lt	8.10
ge:multilin_f35_firmware	ge multilin f35 firmware	lt	8.10
ge:multilin_f60_firmware	ge multilin f60 firmware	lt	8.10
ge:multilin_g30_firmware	ge multilin g30 firmware	lt	8.10

Rows per page:

1-10 of 191

References

www.cisa.gov/uscert/ics/advisories/icsa-21-075-02

www.gegridsolutions.com/Passport/Login.aspx

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

51.4%

JSON

Related for CVE-2021-27422

prion1 cvelist1 threatpost1 thn1 ics1