CVE-2021-27448

A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E all firmware versions prior to v04A00.1...

EUVD-2021-14202

Malware in sbrugna...

EUVD-2021-14206

Malware in sbrugna...

CVE-2021-27450

SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to additional misconfiguration or be leveraged as part of a larger attack on the MU320E all firmware versions prior to v04A00.1...

CVE-2021-27448

A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E all firmware versions prior to v04A00.1...

CVE-2021-27448

A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E all firmware versions prior to v04A00.1...

CVE-2021-27452

The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E all firmware versions prior to v04A00.1...

CVE-2021-27450

SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to additional misconfiguration or be leveraged as part of a larger attack on the MU320E all firmware versions prior to v04A00.1...

CVE-2021-27450

SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to additional misconfiguration or be leveraged as part of a larger attack on the MU320E all firmware versions prior to v04A00.1...

Design/Logic Flaw

SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to additional misconfiguration or be leveraged as part of a larger attack on the MU320E all firmware versions prior to v04A00.1...

Information disclosure

A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E all firmware versions prior to v04A00.1...

Hardcoded credentials

The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E all firmware versions prior to v04A00.1...

CVE-2021-27448

The CVE-2021-27448 entry affects GE MU320E devices (all firmware versions prior to 04A00.1). The vulnerability stems from a miscommunication in the file system that enables adversaries with local access to escalate privileges on the MU320E. Public sources in the connected documents describe the i...

CVE-2021-27448

A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E all firmware versions prior to v04A00.1...

CVE-2021-27450

SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to additional misconfiguration or be leveraged as part of a larger attack on the MU320E all firmware versions prior to v04A00.1...

CVE-2021-27450

GE MU320E firmware prior to v04A00.1 contains an SSH server configuration weakness (inadequate encryption strength) due to not following best practices in the SSH server config. This could contribute to misconfigurations or enable broader attacks on the device. Affected firmware lines up to v04A0...

CVE-2021-27452

CVE-2021-27452 affects GE MU320E firmware prior to v04A00.1. The vulnerability is a hard-coded password that could allow an attacker with local access to take control of the merging unit. Affected product: MU320E (all firmware versions before v04A00.1). Remediation: GE-recommended upgrade to v04A...

PT-2021-17459 · Mu320E · Mu320E

Name of the Vulnerable Software and Affected Versions: MU320E versions prior to v04A00.1 Description: The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials. Recommendations: For versions prior to v04A00.1,...

GE MU320E Insufficient Encryption Strength Vulnerability

The MU320E is a process interface unit from GE with integrated analog and digital merge interfaces. An insufficient cryptographic strength vulnerability exists in the firmware prior to GE MU320E 04A00.1. The vulnerability stems from some aspects of the SSH server configuration file not being...

GE MU320E Elevation of Privilege Vulnerability

The MU320E is a process interface unit from GE with integrated analog and digital merge interfaces. An elevation of privilege vulnerability exists in GE MU320E firmware prior to version 04A00.1. The vulnerability stems from a communication error in the file system. An attacker could exploit the...