CVE-2021-27420: falha de média gravidade em GE UR family
GE UR family input validation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 1.0%
GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsupported HTTP requests. When unresponsive, the web server is inaccessible. By itself, this is not particularly significant as the relay remains effective in all other functionality and communication channels.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
GE · UR familyCVEs relacionadas — GE UR family
No mesmo produto, das mais perigosas para as menos.
CVE-2021-27426CRITICALGE UR family insecure default variable initializationEPSS 1.2%CVE-2021-27428CRITICALGE UR family Unrestricted Upload of File with Dangerous TypeEPSS 1.2%CVE-2021-27424MEDIUMGE UR family exposure of sensitive information to an unauthorized actorEPSS 0.9%CVE-2021-27422HIGHGE UR family exposure of sensitive information to an unauthorized actorEPSS 0.7%CVE-2021-27418MEDIUMGE UR family input validationEPSS 0.6%