VDB
CVE-2021-27430
CVE-2021-27430
PUBLISHED
CVSS 8.399999618530273 HIGH
GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR.
EPSS 0.25% · 15.2th percentile
Risk Scores
CVSS 3.1
8.399999618530273
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.25%
15.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ge | ur_bootloader_binary | 7.00, 7.01, 7.02 |
| GE | UR bootloader binary | 7.00, 7.01, 7.02 |
Timeline
- Mar 23, 2022 CVE Published
- Mar 24, 2022 EPSS Score
- May 14, 2022 EPSS Score
- Jul 5, 2022 EPSS Score
- Aug 26, 2022 EPSS Score
- Oct 17, 2022 EPSS Score
- Dec 7, 2022 EPSS Score
- Jan 27, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 20, 2023 EPSS Score
- May 10, 2023 EPSS Score
- Jul 1, 2023 EPSS Score