Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-27426

GE UR family insecure default variable initialization

Description

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GE UR family

  • unspecified to < 8.1xaffected

References