Medium severity5.3NVD Advisory· Published Mar 23, 2022· Updated Jun 17, 2026

CVE-2021-27418

Description

GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Firmware web server does not perform HTML encoding of user-supplied strings.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ge/Multilin B30 Firmware
cpe:2.3:o:ge:multilin_b30_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin B90 Firmware
cpe:2.3:o:ge:multilin_b90_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin C30 Firmware
cpe:2.3:o:ge:multilin_c30_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin C60 Firmware
cpe:2.3:o:ge:multilin_c60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin C70 Firmware
cpe:2.3:o:ge:multilin_c70_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin C95 Firmware
cpe:2.3:o:ge:multilin_c95_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin D30 Firmware
cpe:2.3:o:ge:multilin_d30_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin D60 Firmware
cpe:2.3:o:ge:multilin_d60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin F35 Firmware
cpe:2.3:o:ge:multilin_f35_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin F60 Firmware
cpe:2.3:o:ge:multilin_f60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin G30 Firmware
cpe:2.3:o:ge:multilin_g30_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin G60 Firmware
cpe:2.3:o:ge:multilin_g60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin L30 Firmware
cpe:2.3:o:ge:multilin_l30_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin L60 Firmware
cpe:2.3:o:ge:multilin_l60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin L90 Firmware
cpe:2.3:o:ge:multilin_l90_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin M60 Firmware
cpe:2.3:o:ge:multilin_m60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin N60 Firmware
cpe:2.3:o:ge:multilin_n60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin T35 Firmware
cpe:2.3:o:ge:multilin_t35_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin T60 Firmware
cpe:2.3:o:ge:multilin_t60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/UR firmwarellm-create
Range: <8.1x
GE/UR familyv5
Range: unspecified

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-21-075-02nvdMitigationThird Party AdvisoryUS Government Resource
www.gegridsolutions.com/Passport/Login.aspxnvdPermissions RequiredVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000