VULNERABILITY INTELLIGENCE

CVE-2021-27426

CVSS score9.8 CRITICAL

EPSS probability1.21%

CISA KEVNot currently listed

Published2022-03-23

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.

Weakness classification

ics-cert@hq.dhs.gov: CWE-453
nvd@nist.gov: NVD-CWE-Other

Primary references

ics-cert@hq.dhs.gov — Mitigation, Third Party Advisory, US Government Resource
ics-cert@hq.dhs.gov — Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory