Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2021-27424

GE UR family exposure of sensitive information to an unauthorized actor

Description

GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GE UR family

  • unspecified to < 8.1xaffected

References