CVE-2021-27424 — GE UR family exposure of sensitive information to an unauthorized actor

CVE-2021-27424

GE UR family exposure of sensitive information to an unauthorized actor PUBLISHED

Description (CNA)

GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information.

Affected (CNA)

Vendor / product	Versions
GE / UR family	affected unspecified before 8.1x

CWE

CWE-200

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
https://www.gegridsolutions.com/Passport/Login.aspx

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
https://www.gegridsolutions.com/Passport/Login.aspx

CISA-ADP

No English description supplied.

No references supplied.