CVE-2017-7905

🗓️ 30 Jun 2017 02:35:00Reported by icscertType

Weak Cryptography for Passwords in GE Multilin SR 750, SR 760, SR 469, SR 489, SR 745, SR 369, and Multilin Universal Rela

Reporter	Title	Published	Views	Family All 10
CNVD	Weak Password Vulnerability in Multiple GE Products	5 May 201700:00	–	cnvd
Cvelist	CVE-2017-7905	30 Jun 201702:35	–	cvelist
EUVD	EUVD-2017-16876	7 Oct 202500:30	–	euvd
ICS	GE Multilin SR Protective Relays	27 Apr 201700:00	–	ics
ICS	GE Multilin SR, UR, and URplus Protective Relays (Update A)	27 Apr 201700:00	–	ics
ICS	GE Multilin SR, UR, and URplus Protective Relays (Update B)	27 Apr 201700:00	–	ics
NVD	CVE-2017-7905	30 Jun 201703:29	–	nvd
OSV	CVE-2017-7905	30 Jun 201703:29	–	osv
Prion	Command injection	30 Jun 201703:29	–	prion
Tenable Nessus	GE Multilin UR / URPlus / B95Plus Protection Relay Cryptographic Algorithm Weakness Information Disclosure (UR-2017-0001)	26 May 201700:00	–	nessus

NVD

Vulners

Node

ge multilin_sr_750_feeder_protection_relay_firmwareRange≤5.02

AND

ge multilin_sr_750_feeder_protection_relayMatch-

Node

ge multilin_sr_760_feeder_protection_relay_firmwareRange≤5.02

AND

ge multilin_sr_760_feeder_protection_relayMatch-

Node

ge multilin_sr_469_motor_protection_relay_firmwareRange≤2.90

AND

ge multilin_sr_469_motor_protection_relayMatch-

Node

ge multilin_sr_489_generator_protection_relay_firmwareRange≤1.53

AND

ge multilin_sr_489_generator_protection_relayMatch-

Node

ge multilin_sr_745_transformer_protection_relay_firmwareRange≤2.85

AND

ge multilin_sr_745_transformer_protection_relayMatch-

Node

ge multilin_sr_369_motor_protection_relay_firmwareMatch-

AND

ge multilin_sr_369_motor_protection_relayMatch-

Node

ge multilin_universal_relay_firmwareRange≤6.0

AND

ge multilin_universal_relayMatch-

Node

ge multilin_urplus_d90_firmwareMatch-

AND

ge multilin_urplus_d90Match-

Node

ge multilin_urplus_c90_firmwareMatch-

AND

ge multilin_urplus_c90Match-

Node

ge multilin_urplus_b95_firmwareMatch-

AND

ge multilin_urplus_b95Match-

[
  {
    "product": "GE Multilin SR, UR, and URplus Protective Relays",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "GE Multilin SR, UR, and URplus Protective Relays"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-17-117-01A
securityfocus	www.securityfocus.com/bid/98063

13 May 2026 00:24Current

9.2High risk

Vulners AI Score9.2

CVSS 25

CVSS 39.8

EPSS0.00196

cve-2017-7905 general electric multilin feeder protection relay motor protection relay generator protection relay transformer protection relay universal relay urplus cryptography weak passwords firmware vulnerability