Known vulnerabilities in GE UR family
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2021-27422 | GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol | 7.5 High | Mar 23, 2022 |
| CVE-2021-27426 | GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the… | 9.8 Critical | Mar 23, 2022 |
| CVE-2021-27428 | GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool –… | 9.8 Critical | Mar 23, 2022 |
| CVE-2021-27424 | GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide | 5.3 Medium | Mar 23, 2022 |
| CVE-2021-27420 | GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP… | 5.3 Medium | Mar 23, 2022 |
| CVE-2021-27418 | GE UR firmware versions prior to version 8.1x supports web interface with read-only access | 5.3 Medium | Mar 23, 2022 |
Other GE products
CIMPLICITY 5
Voluson S8 3
Multilink ML800/1200/1600/2400 3
ML810/3000/3100 series switch 3
MDS PulseNET and MDS PulseNET Enterprise 3
Proficy HMI/SCADA - CIMPLICITY 2
Proficy Process Systems with CIMPLICITY 2
Reason RT43X Clocks 2
iFix 1
IGS 1
Hydran M2, containing the 17046 Ethernet option 1
GE Ultrasound Products 1