Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-27426 EUVD-2021-14180GHSA-qwcv-4jvg-f4mr

GE UR family insecure default variable initialization

Published Mar 23, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.

Affected products

VendorProductAffectedFixed
GE UR family unspecified – < 8.1x 8.1x

Advisories 1

References