CVE-2021-27426

🗓️ 23 Mar 2022 19:46:27Reported by icscertType

GE UR IED firmware < 8.1x "Basic" security variant allows Factory Mode disablin

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2021-27426	23 Mar 202223:29	–	circl
CNNVD	GE Grid Solutions UR 安全漏洞	16 Mar 202100:00	–	cnnvd
Cvelist	CVE-2021-27426 GE UR family insecure default variable initialization	23 Mar 202219:46	–	cvelist
EUVD	EUVD-2021-14180	7 Oct 202500:30	–	euvd
ICS	GE UR Family (Update A)	16 Mar 202106:00	–	ics
NVD	CVE-2021-27426	23 Mar 202220:15	–	nvd
OSV	CVE-2021-27426	23 Mar 202220:15	–	osv
Prion	Code injection	23 Mar 202220:15	–	prion
RedhatCVE	CVE-2021-27426	9 Jan 202608:53	–	redhatcve
Tenable Nessus	GE UR family Insecure Default Variable Initialization (CVE-2021-27426)	29 Sep 202500:00	–	nessus

NVD

Vulners

Node

ge multilin_b30_firmwareRange<8.10

AND

ge multilin_b30Match-

Node

ge multilin_b90_firmwareRange<8.10

AND

ge multilin_b90Match-

Node

ge multilin_c60_firmwareRange<8.10

AND

ge multilin_c60Match-

Node

ge multilin_c70_firmwareRange<8.10

AND

ge multilin_c70Match-

Node

ge multilin_c95_firmwareRange<8.10

AND

ge multilin_c95Match-

Node

ge multilin_d30_firmwareRange<8.10

AND

ge multilin_d30Match-

Node

ge multilin_d60_firmwareRange<8.10

AND

ge multilin_d60Match-

Node

ge multilin_f35_firmwareRange<8.10

AND

ge multilin_f35Match-

Node

ge multilin_f60_firmwareRange<8.10

AND

ge multilin_f60Match-

Node

ge multilin_g30_firmwareRange<8.10

AND

ge multilin_g30Match-

Node

ge multilin_g60_firmwareRange<8.10

AND

ge multilin_g60Match-

Node

ge multilin_l30_firmwareRange<8.10

AND

ge multilin_l30Match-

Node

ge multilin_l60_firmwareRange<8.10

AND

ge multilin_l60Match-

Node

ge multilin_l90_firmwareRange<8.10

AND

ge multilin_l90Match-

Node

ge multilin_m60_firmwareRange<8.10

AND

ge multilin_m60Match-

Node

ge multilin_n60_firmwareRange<8.10

AND

ge multilin_n60Match-

Node

ge multilin_t35_firmwareRange<8.10

AND

ge multilin_t35Match-

Node

ge multilin_t60_firmwareRange<8.10

AND

ge multilin_t60Match-

Node

ge multilin_c30_firmwareRange<8.10

AND

ge multilin_c30Match-

[
  {
    "product": "UR family",
    "vendor": "GE",
    "versions": [
      {
        "lessThan": "8.1x",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
gegridsolutions	www.gegridsolutions.com/Passport/Login.aspx
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-075-02

21 Nov 2024 05:57Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

EPSS0.0029

SSVC

CWE-453

cve-2021-27426 ge ur ied firmware vulnerability security variant factory mode