GE
GE Multilin C70 Firmware: vulnerabilidades y CVE
GE Multilin C70 Firmware tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-27428 | Crítica (9.8) | 1.2% | — | 23 mar 2022 | GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before… |
| CVE-2021-27426 | Crítica (9.8) | 1.2% | — | 23 mar 2022 | GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user. |
| CVE-2021-27424 | Media (5.3) | 0.88% | — | 23 mar 2022 | GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information. |
| CVE-2021-27422 | Alta (7.5) | 0.67% | — | 23 mar 2022 | GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication. |
| CVE-2021-27420 | Media (5.3) | 1.1% | — | 23 mar 2022 | GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of… |
| CVE-2021-27418 | Media (6.1) | 0.61% | — | 23 mar 2022 | GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used… |
Otros productos de GE
Cimplicity · 12Intelligent Platforms Proficy Hmi/scada Cimplicity · 10Industrial Gateway Server · 7Multilin C60 Firmware · 6Multilin C30 Firmware · 6Intelligent Platforms Proficy Process Systems With Cimplicity · 6Multilin B30 Firmware · 6Intelligent Platforms Proficy Historian · 6GE Communicator · 6Multilin B90 Firmware · 6Intelligent Platforms Proficy Real-time Information Portal · 6Multilin C95 Firmware · 6