Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: GE UR family 8.1x Clear all filters
TI-2021-08915 CVE-2021-27426 · GHSA-qwcv-4jvg-f4mr

GE UR family insecure default variable initialization

Priority MEDIUM 51

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0121 Published 2022-03-23 Fixed in 8.1x CWE-453
TI-2021-08917 CVE-2021-27428 · GHSA-f7x4-vpfj-xmrc

GE UR family Unrestricted Upload of File with Dangerous Type

Priority MEDIUM 51

GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0121 Published 2022-03-23 Fixed in 8.1x CWE-434
TI-2021-08910 CVE-2021-27420 · GHSA-vw3w-wmxj-qpxw

GE UR family input validation

Priority LOW 32

GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsuppor…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01032 Published 2022-03-23 Fixed in 8.1x CWE-20
TI-2021-08908 CVE-2021-27418 · GHSA-xhjj-qrrg-5524

GE UR family input validation

Priority LOW 34

GE UR firmware versions prior to version 8.1x supports web interface with read-only access.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00609 Published 2022-03-23 Fixed in 8.1x CWE-20