Read the docs

GE

Records129All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical51CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9

Exploited now

GE records in CISA KEV

No GE vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cimplicity 12 records MEDIUM Intelligent Platforms Proficy Hmi/scada Cimplicity 10 records HIGH Industrial Gateway Server 7 records MEDIUM Ge Communicator 6 records MEDIUM Intelligent Platforms Proficy Historian 6 records HIGH Intelligent Platforms Proficy Process Systems With Cimplicity 6 records HIGH Intelligent Platforms Proficy Real-time Information Portal 6 records MEDIUM Multilin B30 Firmware 6 records MEDIUM

Records

6 records in Multilin B30 Firmware · all components

TI-2021-08917 CVE-2021-27428 · GHSA-f7x4-vpfj-xmrc

GE UR family Unrestricted Upload of File with Dangerous Type

Priority MEDIUM 51

GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0121 Published 2022-03-23 Fixed in 8.1x CWE-434
TI-2021-08915 CVE-2021-27426 · GHSA-qwcv-4jvg-f4mr

GE UR family insecure default variable initialization

Priority MEDIUM 51

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0121 Published 2022-03-23 Fixed in 8.1x CWE-453
TI-2021-08908 CVE-2021-27418 · GHSA-xhjj-qrrg-5524

GE UR family input validation

Priority LOW 34

GE UR firmware versions prior to version 8.1x supports web interface with read-only access.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00609 Published 2022-03-23 Fixed in 8.1x CWE-20
TI-2021-08910 CVE-2021-27420 · GHSA-vw3w-wmxj-qpxw

GE UR family input validation

Priority LOW 32

GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsuppor…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01032 Published 2022-03-23 Fixed in 8.1x CWE-20
Open these records in search →