CVE-2021-27426: GE UR family insecure default variable initialization

Reference Links

• https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
• https://www.gegridsolutions.com/Passport/Login.aspx
• https://www.cisa.gov/news-events/ics-advisories/icsa-21-075-02 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• ICSA-21-075-02

Frequently Asked Questions

• What is CVE-2021-27426?

  CVE-2021-27426 is a vulnerability that affects GE UR IED firmware versions prior to version 8.1x with the “Basic” security variant.

• What is the severity of CVE-2021-27426?

  CVE-2021-27426 has a severity rating of 9.8, which is classified as critical.

• Which software versions are affected by CVE-2021-27426?

  GE UR IED firmware versions prior to version 8.1x with the “Basic” security variant are affected by CVE-2021-27426.

• How can I fix CVE-2021-27426?

  To fix CVE-2021-27426, update your GE UR IED firmware to version 8.1x or later with the “Basic” security variant.

• Where can I find more information about CVE-2021-27426?

  You can find more information about CVE-2021-27426 on the CISA (Cybersecurity and Infrastructure Security Agency) website and the GE Grid Solutions website.