CVE-2021-27422 — GE UR family exposure of sensitive information to an unauthorized actor

CVE-2021-27422

GE UR family exposure of sensitive information to an unauthorized actor PUBLISHED

Description (CNA)

GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.

Affected (CNA)

Vendor / product	Versions
GE / UR family	affected unspecified before 8.1x

CWE

CWE-200

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
https://www.gegridsolutions.com/Passport/Login.aspx

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
https://www.gegridsolutions.com/Passport/Login.aspx

CISA-ADP

No English description supplied.

No references supplied.