CVE-2021-27438

CVE-2021-27438 concerns GE Reason DR60 firmware prior to 02A04.1, where externally influenced input can be used to construct code segments, enabling a code injection vulnerability. The vulnerability affects the DR60 digital fault recorder, with impact described as allow code execution through cra...

CVE-2021-27440

Summary: CVE-2021-27440 concerns GE Reason DR60 firmware with a hard-coded password used for inbound authentication or outbound communication to external components in all versions before 02A04.1. Affected product/versions (as stated): Reason DR60 firmware prior to 02A04.1. Root cause (as describ...

CVE-2021-27454

CVE-2021-27454 affects GE Reason DR60 firmware prior to 02A04.1, where the software performs an operation at a privilege level higher than required, enabling execution with unnecessary privileges. This is documented across multiple sources (NVD, Red Hat, CNVD, CVE listings, and CISA ICS advisory)...