VDB
CVE-2021-27428
CVE-2021-27428
PUBLISHED
CVSS 9.800000190734863 CRITICAL
GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without appropriate privileges. The weakness is assessed, and mitigation is implemented in firmware Version 8.10.
EPSS 1.21% · 67.3th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.21%
67.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ge | multilin_f35_firmware | 0 |
| ge | multilin_t60_firmware | 0 |
| ge | multilin_b30_firmware | 0 |
| ge | multilin_c95_firmware | 0 |
| ge | multilin_t35_firmware | 0 |
| ge | multilin_d60_firmware | 0 |
| ge | multilin_m60_firmware | 0 |
| GE | UR family | unspecified |
| ge | multilin_f60_firmware | 0 |
| ge | multilin_c70_firmware | 0 |
| ge | multilin_b90_firmware | 0 |
| ge | multilin_d30_firmware | 0 |
| ge | multilin_l60_firmware | 0 |
| ge | multilin_n60_firmware | 0 |
| ge | multilin_l90_firmware | 0 |
| ge | multilin_l30_firmware | 0 |
| ge | multilin_c30_firmware | 0 |
| ge | multilin_g60_firmware | 0 |
| ge | multilin_c60_firmware | 0 |
| ge | multilin_g30_firmware | 0 |
Timeline
- Mar 23, 2022 CVE Published
- Mar 24, 2022 EPSS Score
- May 14, 2022 EPSS Score
- Jul 5, 2022 EPSS Score
- Aug 26, 2022 EPSS Score
- Oct 17, 2022 EPSS Score
- Dec 7, 2022 EPSS Score
- Jan 28, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 11, 2023 EPSS Score
- Jul 1, 2023 EPSS Score
- Aug 22, 2023 EPSS Score