Multilin B30 Firmware

multilin_b30_firmware

Vendor: Ge • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-27428 1Ge 19Multilin B30 Firmware Multilin B90 FirmwareMultilin C30 Firmware+16 more Jun 17, 2026 Mar 23, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before up...Show more GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without appropriate privileges. The weakness is assessed, and mitigation is implemented in firmware Version 8.10.Show less
CVE-2021-27426 1Ge 19Multilin B30 Firmware Multilin B90 FirmwareMultilin C30 Firmware+16 more Jun 17, 2026 Mar 23, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.
CVE-2021-27424 1Ge 19Multilin B30 Firmware Multilin B90 FirmwareMultilin C30 Firmware+16 more Jun 17, 2026 Mar 23, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information.
CVE-2021-27422 1Ge 19Multilin B30 Firmware Multilin B90 FirmwareMultilin C30 Firmware+16 more Jun 17, 2026 Mar 23, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.
CVE-2021-27420 1Ge 19Multilin B30 Firmware Multilin B90 FirmwareMultilin C30 Firmware+16 more Jun 17, 2026 Mar 23, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsuppor...Show more GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsupported HTTP requests. When unresponsive, the web server is inaccessible. By itself, this is not particularly significant as the relay remains effective in all other functionality and communication channels.Show less
CVE-2021-27418 1Ge 19Multilin B30 Firmware Multilin B90 FirmwareMultilin C30 Firmware+16 more Jun 17, 2026 Mar 23, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used...Show more GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Firmware web server does not perform HTML encoding of user-supplied strings.Show less