CVE-2021-27430 — Vulnetix

Try Vulnetix Request Demo

CVE-2021-27430 PUBLISHED CVSS 8.399999618530273 HIGH

GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR.

EPSS 0.05% · 14.7th percentile

Risk Scores

CVSS v3.1

8.399999618530273

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.05%

14.7th percentile

Affected Products

Vendor	Product	Versions
ge	ur_bootloader_binary	7.00, 7.01, 7.02
GE	UR bootloader binary	7.00, 7.01, 7.02

Timeline

Mar 23, 2022 CVE Published
Mar 24, 2022 EPSS Score
May 13, 2022 EPSS Score
Jul 3, 2022 EPSS Score
Aug 23, 2022 EPSS Score
Oct 12, 2022 EPSS Score
Dec 2, 2022 EPSS Score
Jan 21, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 12, 2023 EPSS Score
May 2, 2023 EPSS Score
Jun 21, 2023 EPSS Score

References

Open in Interactive Console →