Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-27422

GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.

Published

2022-03-23T20:15:08.367

Last Modified

2024-11-21T05:57:57.480

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-200
  • Type: Primary
    CWE-319
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System ge multilin_b30_firmware < 8.10 Yes
Hardware ge multilin_b30 - No
Operating System ge multilin_b90_firmware < 8.10 Yes
Hardware ge multilin_b90 - No
Operating System ge multilin_c60_firmware < 8.10 Yes
Hardware ge multilin_c60 - No
Operating System ge multilin_c70_firmware < 8.10 Yes
Hardware ge multilin_c70 - No
Operating System ge multilin_c95_firmware < 8.10 Yes
Hardware ge multilin_c95 - No
Operating System ge multilin_d30_firmware < 8.10 Yes
Hardware ge multilin_d30 - No
Operating System ge multilin_d60_firmware < 8.10 Yes
Hardware ge multilin_d60 - No
Operating System ge multilin_f35_firmware < 8.10 Yes
Hardware ge multilin_f35 - No
Operating System ge multilin_f60_firmware < 8.10 Yes
Hardware ge multilin_f60 - No
Operating System ge multilin_g30_firmware < 8.10 Yes
Hardware ge multilin_g30 - No
Operating System ge multilin_g60_firmware < 8.10 Yes
Hardware ge multilin_g60 - No
Operating System ge multilin_l30_firmware < 8.10 Yes
Hardware ge multilin_l30 - No
Operating System ge multilin_l60_firmware < 8.10 Yes
Hardware ge multilin_l60 - No
Operating System ge multilin_l90_firmware < 8.10 Yes
Hardware ge multilin_l90 - No
Operating System ge multilin_m60_firmware < 8.10 Yes
Hardware ge multilin_m60 - No
Operating System ge multilin_n60_firmware < 8.10 Yes
Hardware ge multilin_n60 - No
Operating System ge multilin_t35_firmware < 8.10 Yes
Hardware ge multilin_t35 - No
Operating System ge multilin_t60_firmware < 8.10 Yes
Hardware ge multilin_t60 - No
Operating System ge multilin_c30_firmware < 8.10 Yes
Hardware ge multilin_c30 - No
References