Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-27424 EUVD-2021-14178GHSA-hvjm-qmp9-pw7f

GE UR family exposure of sensitive information to an unauthorized actor

Published Mar 23, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information.

Affected products

VendorProductAffectedFixed
GE UR family unspecified – < 8.1x 8.1x

Advisories 1

References