CVE-2021-27440: Critical severity ge dr60 vulnerability

Q: What is CVE-2021-27440?

CVE-2021-27440 is a vulnerability in the Ge Reason DR60 firmware that allows for a hard-coded password to be used for inbound authentication or outbound communication.

Q: What is the severity of CVE-2021-27440?

CVE-2021-27440 has a severity rating of 9.8 (Critical).

Q: Which software versions are affected by CVE-2021-27440?

All firmware versions prior to 02A04.1 of the Ge Reason DR60 firmware are affected by CVE-2021-27440.

Q: How can I fix CVE-2021-27440?

To fix CVE-2021-27440, it is recommended to update the Ge Reason DR60 firmware to version 02A04.1 or later.

Q: Are there any additional references for CVE-2021-27440?

Yes, you can find more information about CVE-2021-27440 at the following URL: https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03.

Published Mar 25, 2021

Updated

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1).

Affected Software

3 affected components

GE DR60: All firmware versions prior to 02A04.1

GE Reason Dr60 Firmware<02a04.1

GE Reason DR60

Event History

Mar 25, 2021

CVE Published

via MITRE·07:28 PM

Data Sourced

via MITRE·07:28 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-21-082-03

Frequently Asked Questions

What is CVE-2021-27440?

CVE-2021-27440 is a vulnerability in the Ge Reason DR60 firmware that allows for a hard-coded password to be used for inbound authentication or outbound communication.

What is the severity of CVE-2021-27440?

CVE-2021-27440 has a severity rating of 9.8 (Critical).

Which software versions are affected by CVE-2021-27440?

All firmware versions prior to 02A04.1 of the Ge Reason DR60 firmware are affected by CVE-2021-27440.

How can I fix CVE-2021-27440?