Ge vulnerabilities, page 2

127 vulnerabilities

Known vulnerabilities in Ge products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 143 products.

7.8HighCVE-2021-27454ge · reason_dr60_firmwarege reason_dr60_firmwareThe software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1).EPSS0.24%9.8CriticalCVE-2021-27440ge · reason_dr60_firmwarege reason_dr60_firmwareThe software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1).EPSS1.40%7.5HighCVE-2021-27422ge · multilin_b30_firmware +19 moreGE UR family exposure of sensitive information to an unauthorized actorGE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.EPSS0.67%6.1MediumCVE-2021-27418ge · multilin_b30_firmware +19 moreGE UR family input validationGE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Firmware web server does not perform HTML encoding of user-supplied strings.EPSS0.61%9.8CriticalCVE-2021-27426ge · multilin_b30_firmware +19 moreGE UR family insecure default variable initializationGE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.EPSS1.21%9.8CriticalCVE-2021-27428ge · multilin_b30_firmware +19 moreGE UR family Unrestricted Upload of File with Dangerous TypeGE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without appropriate privileges. The weakness is assessed, and mitigation is implemented in firmware Version 8.10.EPSS1.21%8.8HighCVE-2021-27438ge · reason_dr60_firmwarege reason_dr60_firmwareThe software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1).EPSS1.25%5.3MediumCVE-2021-27424ge · multilin_b30_firmware +19 moreGE UR family exposure of sensitive information to an unauthorized actorGE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information.EPSS0.88%7.8HighCVE-2021-27448ge · mu320e_firmwarege mu320e_firmwareA miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E (all firmware versions prior to v04A00.1).EPSS0.24%5.3MediumCVE-2021-27420ge · multilin_b30_firmware +19 moreGE UR family input validationGE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsupported HTTP requests. When unresponsive, the web server is inaccessible. By itself, this is not particularly significant as the relay remains effective in all other functionality and communication channels.EPSS1.06%7.5HighCVE-2021-44477ge gas power · toolboxst +1 moreGE Gas Power ToolBoxST Improper Restriction of XML External Entity ReferenceGE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity (XXE) vulnerability using the DTD parameter entities technique that could result in disclosure and retrieval of arbitrary data on the affected node via an out-of-band (OOB) attack. The vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project/template file.EPSS1.09%10CriticalCVE-2015-6459ge · mds_pulsenetge mds_pulsenetAbsolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 allows remote attackers to read or delete arbitrary files via a full pathname.EPSS3.05%9CriticalCVE-2015-6456ge · mds_pulsenetge mds_pulsenetGE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account, which allows remote attackers to obtain administrative access, and consequently execute arbitrary code, by leveraging knowledge of the password.EPSS3.78%6.8MediumCVE-2015-3976ge · ml810/3000/3100 series switch +8 moreGE Multilink Cross-site ScriptingCross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier.EPSS1.19%10CriticalCVE-2016-2310ge · multilink_firmwarege multilink_firmwareGeneral Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface.EPSS3.22%6.5MediumCVE-2016-0862ge · snmp\/web_adapter_firmwarege snmp\/web_adapter_firmwareGeneral Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to obtain sensitive cleartext account information via unspecified vectors.EPSS9.93%9CriticalCVE-2016-0861ge · ups_snmp_web_adapter_firmwarege ups_snmp_web_adapter_firmwareGeneral Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to execute arbitrary commands via unspecified vectors.EPSS14.24%6.7MediumCVE-2016-9360ge · cimplicity +2 morege cimplicityAn issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions, and Proficy Historian Version 6.0 and prior versions. An attacker may be able to retrieve user passwords if he or she has access to an authenticated session.EPSS0.37%6.3MediumCVE-2016-5787ge · cimplicityge cimplicityGeneral Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors.EPSS0.39%10CriticalCVE-2016-5788ge · bently_nevada_3500\/22m_serial_firmware +1 morege bently_nevada_3500\/22m_serial_firmwareGeneral Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access via unspecified vectors.EPSS2.32%