CVE-2021-27422

🗓️ 23 Mar 2022 19:46:28Reported by icscertType

GE UR firmware prior to v8.1x allows sensitive information exposure over HTT

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2021-27422	14 Nov 202406:08	–	circl
CNNVD	GE Grid Solutions UR 信息泄露漏洞	16 Mar 202100:00	–	cnnvd
Cvelist	CVE-2021-27422 GE UR family exposure of sensitive information to an unauthorized actor	23 Mar 202219:46	–	cvelist
EUVD	EUVD-2021-14176	7 Oct 202500:30	–	euvd
ICS	GE UR Family (Update A)	16 Mar 202106:00	–	ics
NVD	CVE-2021-27422	23 Mar 202220:15	–	nvd
Prion	Authentication flaw	23 Mar 202220:15	–	prion
Positive Technologies	PT-2022-9814 · Ge · Ge Ur	23 Mar 202200:00	–	ptsecurity
RedhatCVE	CVE-2021-27422	9 Jan 202608:53	–	redhatcve
Tenable Nessus	GE UR family Exposure of Sensitive Information to an Unauthorized Actor (CVE-2021-27422)	29 Sep 202500:00	–	nessus

NVD

Vulners

Node

ge multilin_b30_firmwareRange<8.10

AND

ge multilin_b30Match-

Node

ge multilin_b90_firmwareRange<8.10

AND

ge multilin_b90Match-

Node

ge multilin_c60_firmwareRange<8.10

AND

ge multilin_c60Match-

Node

ge multilin_c70_firmwareRange<8.10

AND

ge multilin_c70Match-

Node

ge multilin_c95_firmwareRange<8.10

AND

ge multilin_c95Match-

Node

ge multilin_d30_firmwareRange<8.10

AND

ge multilin_d30Match-

Node

ge multilin_d60_firmwareRange<8.10

AND

ge multilin_d60Match-

Node

ge multilin_f35_firmwareRange<8.10

AND

ge multilin_f35Match-

Node

ge multilin_f60_firmwareRange<8.10

AND

ge multilin_f60Match-

Node

ge multilin_g30_firmwareRange<8.10

AND

ge multilin_g30Match-

Node

ge multilin_g60_firmwareRange<8.10

AND

ge multilin_g60Match-

Node

ge multilin_l30_firmwareRange<8.10

AND

ge multilin_l30Match-

Node

ge multilin_l60_firmwareRange<8.10

AND

ge multilin_l60Match-

Node

ge multilin_l90_firmwareRange<8.10

AND

ge multilin_l90Match-

Node

ge multilin_m60_firmwareRange<8.10

AND

ge multilin_m60Match-

Node

ge multilin_n60_firmwareRange<8.10

AND

ge multilin_n60Match-

Node

ge multilin_t35_firmwareRange<8.10

AND

ge multilin_t35Match-

Node

ge multilin_t60_firmwareRange<8.10

AND

ge multilin_t60Match-

Node

ge multilin_c30_firmwareRange<8.10

AND

ge multilin_c30Match-

[
  {
    "product": "UR family",
    "vendor": "GE",
    "versions": [
      {
        "lessThan": "8.1x",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
gegridsolutions	www.gegridsolutions.com/Passport/Login.aspx

17 Jun 2026 03:44Current

7.6High risk

Vulners AI Score7.6

CVSS 25

CVSS 3.17.5

EPSS0.00641

SSVC

cve-2021-27422 ge ur firmware sensitive information exposure http protocol nvd