Critical severity9.8NVD Advisory· Published Mar 23, 2022· Updated Jun 17, 2026

CVE-2021-27428

Description

GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without appropriate privileges. The weakness is assessed, and mitigation is implemented in firmware Version 8.10.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GE/UR familyv5
Range: unspecified
Ge/Multilin B30 Firmware
cpe:2.3:o:ge:multilin_b30_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin B90 Firmware
cpe:2.3:o:ge:multilin_b90_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin C60 Firmware
cpe:2.3:o:ge:multilin_c60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin C70 Firmware
cpe:2.3:o:ge:multilin_c70_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin C95 Firmware
cpe:2.3:o:ge:multilin_c95_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin D30 Firmware
cpe:2.3:o:ge:multilin_d30_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin D60 Firmware
cpe:2.3:o:ge:multilin_d60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin F35 Firmware
cpe:2.3:o:ge:multilin_f35_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin F60 Firmware
cpe:2.3:o:ge:multilin_f60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin G30 Firmware
cpe:2.3:o:ge:multilin_g30_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin G60 Firmware
cpe:2.3:o:ge:multilin_g60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin L30 Firmware
cpe:2.3:o:ge:multilin_l30_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin L60 Firmware
cpe:2.3:o:ge:multilin_l60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin L90 Firmware
cpe:2.3:o:ge:multilin_l90_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin M60 Firmware
cpe:2.3:o:ge:multilin_m60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin N60 Firmware
cpe:2.3:o:ge:multilin_n60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin T35 Firmware
cpe:2.3:o:ge:multilin_t35_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin T60 Firmware
cpe:2.3:o:ge:multilin_t60_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/Multilin C30 Firmware
cpe:2.3:o:ge:multilin_c30_firmware:*:*:*:*:*:*:*:*
Range: <8.10
Ge/UR IED firmwarellm-create
Range: <8.1x

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-21-075-02nvdMitigationThird Party AdvisoryUS Government Resource
www.gegridsolutions.com/Passport/Login.aspxnvdPermissions RequiredVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000