General Electric Multilin G60
Approved changes feed: RSS · Atom
cpe:2.3:h:ge:multilin_g60:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Ge (889d94a1-c6d7-5857-8fdf-da634b4dfc4f) |
|---|---|
| Product | Multilin G60 (78f1115e-649a-5f09-8184-4a42d04c739b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-27428 |
not_vulnerable | 2026-06-03 14:44:15.851481 |
GE UR family Unrestricted Upload of File with Dangerous Type
CRITICAL (9.8)
GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without appropriate privileges. The weakness is assessed, and mitigation is implemented in firmware Version 8.10.
Published: 2022-03-23T19:46:25.000Z
Updated: 2025-04-16T16:40:38.417Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27426 |
not_vulnerable | 2026-06-03 14:44:15.841930 |
GE UR family insecure default variable initialization
CRITICAL (9.8)
GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.
Published: 2022-03-23T19:46:27.000Z
Updated: 2025-04-16T16:40:28.743Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27424 |
not_vulnerable | 2026-06-03 14:44:15.830156 |
GE UR family exposure of sensitive information to an unauthorized actor
MEDIUM (5.3)
GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information.
Published: 2022-03-23T19:46:25.000Z
Updated: 2025-04-16T16:40:47.222Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27422 |
not_vulnerable | 2026-06-03 14:44:15.828636 |
GE UR family exposure of sensitive information to an unauthorized actor
HIGH (7.5)
GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.
Published: 2022-03-23T19:46:28.000Z
Updated: 2025-04-16T16:40:19.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27420 |
not_vulnerable | 2026-06-03 14:44:15.819684 |
GE UR family input validation
MEDIUM (5.3)
GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsupported HTTP requests. When unresponsive, the web server is inaccessible. By itself, this is not particularly significant as the relay remains effective in all other functionality and communication channels.
Published: 2022-03-23T19:46:24.000Z
Updated: 2025-04-16T16:40:57.091Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27418 |
not_vulnerable | 2026-06-03 14:44:15.801456 |
GE UR family input validation
MEDIUM (5.3)
GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Firmware web server does not perform HTML encoding of user-supplied strings.
Published: 2022-03-23T19:46:23.000Z
Updated: 2025-04-16T16:41:07.211Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.