CVE-2021-27438: Code Injection
The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-27438?
CVE-2021-27438 is a vulnerability in the Ge Reason DR60 firmware that allows for the use of a hard-coded password for inbound authentication or outbound communication to external components.
What is the severity of CVE-2021-27438?
The severity of CVE-2021-27438 is rated as high with a severity score of 8.8.
How does CVE-2021-27438 impact the Ge Reason DR60 firmware?
CVE-2021-27438 impacts the Ge Reason DR60 firmware by exposing a hard-coded password that can be used for unauthorized access or interception of outbound communication.
Which versions of the Ge Reason DR60 firmware are affected by CVE-2021-27438?
All firmware versions prior to 02A04.1 of the Ge Reason DR60 firmware are affected by CVE-2021-27438.
How can I fix CVE-2021-27438?
To fix CVE-2021-27438, it is recommended to update the Ge Reason DR60 firmware to version 02A04.1 or later to address the issue of the hard-coded password.