NetSight
critical9.8

CVE-2021-27426

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing…

Impact

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.

Affected products

VendorProductAffected versions
GeMultilin B30 Firmware
before 8.10
GeMultilin B90 Firmware
before 8.10
GeMultilin C60 Firmware
before 8.10
GeMultilin C70 Firmware
before 8.10
GeMultilin C95 Firmware
before 8.10
GeMultilin D30 Firmware
before 8.10
GeMultilin D60 Firmware
before 8.10
GeMultilin F35 Firmware
before 8.10
GeMultilin F60 Firmware
before 8.10
GeMultilin G30 Firmware
before 8.10
GeMultilin G60 Firmware
before 8.10
GeMultilin L30 Firmware
before 8.10

Weakness classification

References