GE
GE Multilin L30 Firmware: vulnerabilities and CVEs
GE Multilin L30 Firmware has 6 published vulnerabilities, 0 of them in the last 12 months. 2 are rated critical and 0 are listed by CISA as actively exploited.
CVEs6
Last 12 months0
Critical2
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-27428 | Critical (9.8) | 1.2% | — | Mar 23, 2022 | GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before… |
| CVE-2021-27426 | Critical (9.8) | 1.2% | — | Mar 23, 2022 | GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user. |
| CVE-2021-27424 | Medium (5.3) | 0.88% | — | Mar 23, 2022 | GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information. |
| CVE-2021-27422 | High (7.5) | 0.67% | — | Mar 23, 2022 | GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication. |
| CVE-2021-27420 | Medium (5.3) | 1.1% | — | Mar 23, 2022 | GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of… |
| CVE-2021-27418 | Medium (6.1) | 0.61% | — | Mar 23, 2022 | GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used… |
Other products by GE
Cimplicity · 12Intelligent Platforms Proficy Hmi/scada Cimplicity · 10Industrial Gateway Server · 7Multilin C60 Firmware · 6Multilin C30 Firmware · 6Intelligent Platforms Proficy Process Systems With Cimplicity · 6Multilin B30 Firmware · 6Intelligent Platforms Proficy Historian · 6GE Communicator · 6Multilin B90 Firmware · 6Intelligent Platforms Proficy Real-time Information Portal · 6Multilin C70 Firmware · 6