MD
Product
Multilin D30 Firmware
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 3Low 0
Watch
Add Multilin D30 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-27428 | 9.8 | Mar 23 | GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup Affected: before 8.10 |
| CVE-2021-27426 | 9.8 | Mar 23 | GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a… Affected: before 8.10 |
| CVE-2021-27422 | 7.5 | Mar 23 | GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol Affected: before 8.10 |
| CVE-2021-27418 | 6.1 | Mar 23 | GE UR firmware versions prior to version 8.1x supports web interface with read-only access Affected: before 8.10 |
| CVE-2021-27424 | 5.3 | Mar 23 | GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide Affected: before 8.10 |
| CVE-2021-27420 | 5.3 | Mar 23 | GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily… Affected: before 8.10 |
Showing 6
