8.4
High
CVE-2021-27430 GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials
Description
GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| UR bootloader binary | 7.02 | No fix stated |
| UR bootloader binary | 7.01 | No fix stated |
| UR bootloader binary | 7.00 | No fix stated |