CVE-2021-27428

GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without appropriate privileges. The weakness is assessed, and mitigation is implemented in firmware Version 8.10.

• CWE-434
• CWE-434

• https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02Mitigation, Third Party Advisory, US Government Resource
• https://www.gegridsolutions.com/Passport/Login.aspxPermissions Required, Vendor Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02Mitigation, Third Party Advisory, US Government Resource
• https://www.gegridsolutions.com/Passport/Login.aspxPermissions Required, Vendor Advisory

Published

Mar 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27421NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to…9.8
• CVE-2021-27422GE UR firmware versions prior to version 8.1x web server int…7.5
• CVE-2021-27424GE UR firmware versions prior to version 8.1x shares MODBUS …5.3
• CVE-2021-27425Cesanta Software Mongoose-OS v2.17.0 is vulnerable to intege…9.8
• CVE-2021-27426GE UR IED firmware versions prior to version 8.1x with “Basi…9.8
• CVE-2021-27427RIOT OS version 2020.01.1 is vulnerable to integer wrap-arou…9.8
• CVE-2021-27429 Texas Instruments TI-RTOS returns a valid pointer to a smal…7.8
• CVE-2021-27430GE UR bootloader binary Version 7.00, 7.01 and 7.02 included…6.8
• CVE-2021-27431ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to in…9.8
• CVE-2021-27432OPC Foundation UA .NET Standard versions prior to 1.4.365.48…7.5
• CVE-2021-27433ARM mbed-ualloc memory library version 1.3.0 is vulnerable t…9.8
• CVE-2021-27434Products with Unified Automation .NET based OPC UA Client/Se…7.5