VULNERABILITY INTELLIGENCE

CVE-2021-27454

CVSS score7.8 HIGH
EPSS probability0.24%
CISA KEVNot currently listed
Published2021-03-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1).

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-250
  • nvd@nist.gov: CWE-269

Primary references