CVE-2021-27418

🗓️ 23 Mar 2022 19:46:23Reported by icscertType

GE UR firmware v8.1x and earlier allows cross-site scripting attacks.

Reporter	Title	Published	Views	Family All 14
CNNVD	GE Grid Solutions UR 跨站脚本漏洞	16 Mar 202100:00	–	cnnvd
Cvelist	CVE-2021-27418 GE UR family input validation	23 Mar 202219:46	–	cvelist
EUVD	EUVD-2021-14172	7 Oct 202500:30	–	euvd
ICS	GE UR Family (Update A)	16 Mar 202106:00	–	ics
NVD	CVE-2021-27418	23 Mar 202220:15	–	nvd
OSV	CVE-2021-27418	23 Mar 202220:15	–	osv
Prion	Cross site scripting	23 Mar 202220:15	–	prion
Positive Technologies	PT-2022-9811	23 Mar 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2021-27418: Improper Input Validation	23 Mar 202200:00	–	rapid7
RedhatCVE	CVE-2021-27418	9 Jan 202609:21	–	redhatcve

NVD

Vulners

Node

AND

ge multilin_b30_firmwareRange<8.10

ge multilin_b30Match-

Node

AND

ge multilin_b90_firmwareRange<8.10

ge multilin_b90Match-

Node

AND

ge multilin_c60_firmwareRange<8.10

ge multilin_c60Match-

Node

AND

ge multilin_c70_firmwareRange<8.10

ge multilin_c70Match-

Node

AND

ge multilin_c95_firmwareRange<8.10

ge multilin_c95Match-

Node

AND

ge multilin_d30_firmwareRange<8.10

ge multilin_d30Match-

Node

AND

ge multilin_d60_firmwareRange<8.10

ge multilin_d60Match-

Node

AND

ge multilin_f35_firmwareRange<8.10

ge multilin_f35Match-

Node

AND

ge multilin_f60_firmwareRange<8.10

ge multilin_f60Match-

Node

AND

ge multilin_g30_firmwareRange<8.10

ge multilin_g30Match-

Node

AND

ge multilin_g60_firmwareRange<8.10

ge multilin_g60Match-

Node

AND

ge multilin_l30_firmwareRange<8.10

ge multilin_l30Match-

Node

AND

ge multilin_l60_firmwareRange<8.10

ge multilin_l60Match-

Node

AND

ge multilin_l90_firmwareRange<8.10

ge multilin_l90Match-

Node

AND

ge multilin_m60_firmwareRange<8.10

ge multilin_m60Match-

Node

AND

ge multilin_n60_firmwareRange<8.10

ge multilin_n60Match-

Node

AND

ge multilin_t35_firmwareRange<8.10

ge multilin_t35Match-

Node

AND

ge multilin_t60_firmwareRange<8.10

ge multilin_t60Match-

Node

AND

ge multilin_c30_firmwareRange<8.10

ge multilin_c30Match-

[
  {
    "product": "UR family",
    "vendor": "GE",
    "versions": [
      {
        "lessThan": "8.1x",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
gegridsolutions	www.gegridsolutions.com/Passport/Login.aspx

17 Jun 2026 03:44Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

CVSS 3.15.3 - 6.1

EPSS0.00609

SSVC

cve-2021-27418 ge ur firmware web interface cross-site scripting xss html encoding