Skip to content
OpenAdvisories
Critical ICSA-21-075-02 10 CVEs

GE UR Family (Update A)

Published Mar 16, 2021 · Updated Apr 16, 2026 · Revision 2

Vendor: GE Veronva Product: UR B30 Product: UR B90 Product: UR C30 Product: UR C60 Product: UR C70 Product: UR C95 Product: UR D30 Product: UR D60 Product: UR F35 Product: UR F60 Product: UR G30 Product: UR G60 Product: UR L30 Product: UR L60 Product: UR L90 Product: UR M60 Product: UR N60 Product: UR T35 Product: UR T60

Summary

Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, reboot the UR, gain privileged access, or cause a denial-of-service condition.

Vulnerabilities 10

  • Critical 9.8
    CVE-2021-27426

    GE UR family insecure default variable initialization

    GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.

    GE UR family
  • Critical 9.8
    CVE-2021-27428

    GE UR family Unrestricted Upload of File with Dangerous Type

    GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate use…

    GE UR family
  • High 8.4
    CVE-2021-27430

    GE UR family hardcoded credentials

    GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR.

    GE UR bootloader binary
  • High 7.5
    CVE-2016-2183 Public exploit EPSS 95%

    The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a b…

    openjdk-8 openssl openjdk-7 openssl Ubuntu Alpine
  • High 7.5
    CVE-2021-27422

    GE UR family exposure of sensitive information to an unauthorized actor

    GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.

    GE UR family
  • Medium 5.9
    CVE-2013-2566 Public exploit EPSS 84%

    The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for…

  • Medium 5.3
    CVE-2021-27418

    GE UR family input validation

    GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Fi…

    GE UR family
  • Medium 5.3
    CVE-2021-27420

    GE UR family input validation

    GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsupported HTTP requests. When unresponsive, t…

    GE UR family
  • Medium 5.3
    CVE-2021-27424

    GE UR family exposure of sensitive information to an unauthorized actor

    GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information.

    GE UR family
  • Unscored —
    CVE-1999-1085

    SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) mo…

Revision history

  1. #2

    Update A - revised advisory content into modern format.

  2. #1

    Initial Publication

References