CVE Feed

    Dashboard / CVE / CVE-2021-27428

    CVE-2021-27428

    GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without appropriate privileges. The weakness is assessed, and mitigation is implemented in firmware Version 8.10.

    Published:Mar 23, 2022
    Last Modified:Apr 16, 2025
    EPS:Mar 23, 2022
    EPSS Score:0.00245
    CVSS Score:9.8

    Affected Products

    Vendor
    Ge
    Product
    Multilin B30
    Vendor
    Ge
    Product
    Multilin B30 Firmware
    Vendor
    Ge
    Product
    Multilin B90
    Vendor
    Ge
    Product
    Multilin B90 Firmware
    Vendor
    Ge
    Product
    Multilin C30
    Vendor
    Ge
    Product
    Multilin C30 Firmware
    Vendor
    Ge
    Product
    Multilin C60
    Vendor
    Ge
    Product
    Multilin C60 Firmware
    Vendor
    Ge
    Product
    Multilin C70
    Vendor
    Ge
    Product
    Multilin C70 Firmware
    Vendor
    Ge
    Product
    Multilin C95
    Vendor
    Ge
    Product
    Multilin C95 Firmware
    Vendor
    Ge
    Product
    Multilin D30
    Vendor
    Ge
    Product
    Multilin D30 Firmware
    Vendor
    Ge
    Product
    Multilin D60
    Vendor
    Ge
    Product
    Multilin D60 Firmware
    Vendor
    Ge
    Product
    Multilin F35
    Vendor
    Ge
    Product
    Multilin F35 Firmware
    Vendor
    Ge
    Product
    Multilin F60
    Vendor
    Ge
    Product
    Multilin F60 Firmware
    Vendor
    Ge
    Product
    Multilin G30
    Vendor
    Ge
    Product
    Multilin G30 Firmware
    Vendor
    Ge
    Product
    Multilin G60
    Vendor
    Ge
    Product
    Multilin G60 Firmware
    Vendor
    Ge
    Product
    Multilin L30
    Vendor
    Ge
    Product
    Multilin L30 Firmware
    Vendor
    Ge
    Product
    Multilin L60
    Vendor
    Ge
    Product
    Multilin L60 Firmware
    Vendor
    Ge
    Product
    Multilin L90
    Vendor
    Ge
    Product
    Multilin L90 Firmware
    Vendor
    Ge
    Product
    Multilin M60
    Vendor
    Ge
    Product
    Multilin M60 Firmware
    Vendor
    Ge
    Product
    Multilin N60
    Vendor
    Ge
    Product
    Multilin N60 Firmware
    Vendor
    Ge
    Product
    Multilin T35
    Vendor
    Ge
    Product
    Multilin T35 Firmware
    Vendor
    Ge
    Product
    Multilin T60
    Vendor
    Ge
    Product
    Multilin T60 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High