VDB

CVE-2021-27422

CVE-2021-27422 PUBLISHED CVSS 7.5 HIGH

GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.

EPSS 0.10% · 27.8th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.10%
27.8th percentile

Affected Products

VendorProductVersions
gemultilin_d60_firmware0
gemultilin_n60_firmware0
gemultilin_b30_firmware0
gemultilin_c70_firmware0
gemultilin_g60_firmware0
gemultilin_f60_firmware0
gemultilin_c95_firmware0
gemultilin_l30_firmware0
gemultilin_t60_firmware0
gemultilin_t35_firmware0
gemultilin_l60_firmware0
gemultilin_m60_firmware0
gemultilin_g30_firmware0
gemultilin_d30_firmware0
gemultilin_f35_firmware0
gemultilin_c30_firmware0
gemultilin_c60_firmware0
GEUR familyunspecified
gemultilin_b90_firmware0
gemultilin_l90_firmware0

Timeline

  • Mar 23, 2022 CVE Published
  • Mar 24, 2022 EPSS Score
  • May 14, 2022 EPSS Score
  • Jul 4, 2022 EPSS Score
  • Aug 25, 2022 EPSS Score
  • Oct 15, 2022 EPSS Score
  • Dec 5, 2022 EPSS Score
  • Jan 25, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Mar 17, 2023 EPSS Score
  • May 6, 2023 EPSS Score
  • Jun 26, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›