Vulnetix
Try Vulnetix Request Demo
CVE-2021-27428 PUBLISHED CVSS 9.800000190734863 CRITICAL

GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without appropriate privileges. The weakness is assessed, and mitigation is implemented in firmware Version 8.10.

EPSS 0.29% · 52.3th percentile

Risk Scores

CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.29%
52.3th percentile

Affected Products

VendorProductVersions
gemultilin_f35_firmware0
gemultilin_t60_firmware0
gemultilin_b30_firmware0
gemultilin_c95_firmware0
gemultilin_t35_firmware0
gemultilin_d60_firmware0
gemultilin_m60_firmware0
GEUR familyunspecified
gemultilin_f60_firmware0
gemultilin_c70_firmware0
gemultilin_b90_firmware0
gemultilin_d30_firmware0
gemultilin_l60_firmware0
gemultilin_n60_firmware0
gemultilin_l90_firmware0
gemultilin_l30_firmware0
gemultilin_c30_firmware0
gemultilin_g60_firmware0
gemultilin_c60_firmware0
gemultilin_g30_firmware0

Timeline

References

Open in Interactive Console →