CVE-2021-27424: falha de média gravidade em GE UR family
GE UR family exposure of sensitive information to an unauthorized actor
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.9%
GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
GE · UR familyCVEs relacionadas — GE UR family
No mesmo produto, das mais perigosas para as menos.
CVE-2021-27426CRITICALGE UR family insecure default variable initializationEPSS 1.2%CVE-2021-27428CRITICALGE UR family Unrestricted Upload of File with Dangerous TypeEPSS 1.2%CVE-2021-27420MEDIUMGE UR family input validationEPSS 1.0%CVE-2021-27422HIGHGE UR family exposure of sensitive information to an unauthorized actorEPSS 0.7%CVE-2021-27418MEDIUMGE UR family input validationEPSS 0.6%