CVE-2021-27422CWE-200

GE UR family exposure of sensitive information to an unauthorized actor

High · published March 23, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00667 · 51.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-03-23T19:46Z
EPSS history
Timeline
  • 23 MAR 19:46Z
    GE UR family exposure of sensitive information to an unauthorized actor
    cvelistv5