CVE-2021-27422 PUBLISHED CVSS 7.5 HIGH

GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.

EPSS 0.10% · 28.2th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.10%
28.2th percentile

Affected Products

VendorProductVersions
gemultilin_d60_firmware0
gemultilin_n60_firmware0
gemultilin_b30_firmware0
gemultilin_c70_firmware0
gemultilin_g60_firmware0
gemultilin_f60_firmware0
gemultilin_c95_firmware0
gemultilin_l30_firmware0
gemultilin_t60_firmware0
gemultilin_t35_firmware0
gemultilin_l60_firmware0
gemultilin_m60_firmware0
gemultilin_g30_firmware0
gemultilin_d30_firmware0
gemultilin_f35_firmware0
gemultilin_c30_firmware0
gemultilin_c60_firmware0
GEUR familyunspecified
gemultilin_b90_firmware0
gemultilin_l90_firmware0

Timeline

References

Open in Interactive Console →