CVE-2021-27420

🗓️ 23 Mar 2022 19:46:24Reported by icscertType

GE UR firmware versions prior to version 8.1x web server task vulnerabilit

Reporter	Title	Published	Views	Family All 12
CNNVD	GE Grid Solutions UR 输入验证错误漏洞	16 Mar 202100:00	–	cnnvd
Cvelist	CVE-2021-27420 GE UR family input validation	23 Mar 202219:46	–	cvelist
EUVD	EUVD-2021-14174	7 Oct 202500:30	–	euvd
ICS	GE UR Family (Update A)	16 Mar 202106:00	–	ics
NVD	CVE-2021-27420	23 Mar 202220:15	–	nvd
OSV	CVE-2021-27420	23 Mar 202220:15	–	osv
Prion	Design/Logic Flaw	23 Mar 202220:15	–	prion
RedhatCVE	CVE-2021-27420	22 May 202519:31	–	redhatcve
Tenable Nessus	GE UR family Improper Input Validation (CVE-2021-27420)	29 Sep 202500:00	–	nessus
The Hacker News	Critical Flaws Affecting GE's Universal Relay Pose Threat to Electric Utilities	23 Mar 202111:24	–	thn

NVD

Vulners

Node

ge multilin_b30_firmwareRange<8.10

AND

ge multilin_b30Match-

Node

ge multilin_b90_firmwareRange<8.10

AND

ge multilin_b90Match-

Node

ge multilin_c60_firmwareRange<8.10

AND

ge multilin_c60Match-

Node

ge multilin_c70_firmwareRange<8.10

AND

ge multilin_c70Match-

Node

ge multilin_c95_firmwareRange<8.10

AND

ge multilin_c95Match-

Node

ge multilin_d30_firmwareRange<8.10

AND

ge multilin_d30Match-

Node

ge multilin_d60_firmwareRange<8.10

AND

ge multilin_d60Match-

Node

ge multilin_f35_firmwareRange<8.10

AND

ge multilin_f35Match-

Node

ge multilin_f60_firmwareRange<8.10

AND

ge multilin_f60Match-

Node

ge multilin_g30_firmwareRange<8.10

AND

ge multilin_g30Match-

Node

ge multilin_g60_firmwareRange<8.10

AND

ge multilin_g60Match-

Node

ge multilin_l30_firmwareRange<8.10

AND

ge multilin_l30Match-

Node

ge multilin_l60_firmwareRange<8.10

AND

ge multilin_l60Match-

Node

ge multilin_l90_firmwareRange<8.10

AND

ge multilin_l90Match-

Node

ge multilin_m60_firmwareRange<8.10

AND

ge multilin_m60Match-

Node

ge multilin_n60_firmwareRange<8.10

AND

ge multilin_n60Match-

Node

ge multilin_t35_firmwareRange<8.10

AND

ge multilin_t35Match-

Node

ge multilin_t60_firmwareRange<8.10

AND

ge multilin_t60Match-

Node

ge multilin_c30_firmwareRange<8.10

AND

ge multilin_c30Match-

[
  {
    "product": "UR family",
    "vendor": "GE",
    "versions": [
      {
        "lessThan": "8.1x",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
gegridsolutions	www.gegridsolutions.com/Passport/Login.aspx
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-075-02

21 Nov 2024 05:57Current

5.8Medium risk

Vulners AI Score5.8

CVSS 25

CVSS 3.15.3

EPSS0.00231

SSVC

CWE-20

ge ur firmware cve-2021-27420 web server vulnerability unsupported http verbs nvd