CVE-2021-27428

🗓️ 23 Mar 2022 19:46:25Reported by icscertType

GE UR IED firmware allows unauthorized firmware upgrad

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2021-27428	14 Nov 202406:08	–	circl
CNNVD	GE Grid Solutions UR 代码问题漏洞	16 Mar 202100:00	–	cnnvd
Cvelist	CVE-2021-27428 GE UR family Unrestricted Upload of File with Dangerous Type	23 Mar 202219:46	–	cvelist
EUVD	EUVD-2021-14182	7 Oct 202500:30	–	euvd
ICS	GE UR Family (Update A)	16 Mar 202106:00	–	ics
NVD	CVE-2021-27428	23 Mar 202220:15	–	nvd
Prion	Code injection	23 Mar 202220:15	–	prion
RedhatCVE	CVE-2021-27428	9 Jan 202608:53	–	redhatcve
Tenable Nessus	GE UR family Unrestricted Upload of File with Dangerous Type (CVE-2021-27428)	29 Sep 202500:00	–	nessus
The Hacker News	Critical Flaws Affecting GE's Universal Relay Pose Threat to Electric Utilities	23 Mar 202111:24	–	thn

NVD

Vulners

Node

ge multilin_b30_firmwareRange<8.10

AND

ge multilin_b30Match-

Node

ge multilin_b90_firmwareRange<8.10

AND

ge multilin_b90Match-

Node

ge multilin_c60_firmwareRange<8.10

AND

ge multilin_c60Match-

Node

ge multilin_c70_firmwareRange<8.10

AND

ge multilin_c70Match-

Node

ge multilin_c95_firmwareRange<8.10

AND

ge multilin_c95Match-

Node

ge multilin_d30_firmwareRange<8.10

AND

ge multilin_d30Match-

Node

ge multilin_d60_firmwareRange<8.10

AND

ge multilin_d60Match-

Node

ge multilin_f35_firmwareRange<8.10

AND

ge multilin_f35Match-

Node

ge multilin_f60_firmwareRange<8.10

AND

ge multilin_f60Match-

Node

ge multilin_g30_firmwareRange<8.10

AND

ge multilin_g30Match-

Node

ge multilin_g60_firmwareRange<8.10

AND

ge multilin_g60Match-

Node

ge multilin_l30_firmwareRange<8.10

AND

ge multilin_l30Match-

Node

ge multilin_l60_firmwareRange<8.10

AND

ge multilin_l60Match-

Node

ge multilin_l90_firmwareRange<8.10

AND

ge multilin_l90Match-

Node

ge multilin_m60_firmwareRange<8.10

AND

ge multilin_m60Match-

Node

ge multilin_n60_firmwareRange<8.10

AND

ge multilin_n60Match-

Node

ge multilin_t35_firmwareRange<8.10

AND

ge multilin_t35Match-

Node

ge multilin_t60_firmwareRange<8.10

AND

ge multilin_t60Match-

Node

ge multilin_c30_firmwareRange<8.10

AND

ge multilin_c30Match-

[
  {
    "product": "UR family",
    "vendor": "GE",
    "versions": [
      {
        "lessThan": "8.1x",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
gegridsolutions	www.gegridsolutions.com/Passport/Login.aspx
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-075-02

21 Nov 2024 05:57Current

9.5High risk

Vulners AI Score9.5

CVSS 27.5

CVSS 3.19.8

EPSS0.0029

SSVC

CWE-434

ge ur ied firmware upgrade unauthorized vulnerability cve-2021-27428 nvd