CVE-2021-27418: Ge Multilin b30 Firmware

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Firmware web server does not perform HTML encoding of user-supplied strings.

Affected products

• Ge Multilin b30 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin b90 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin c30 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin c60 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin c70 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin c95 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin d30 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin d60 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin f35 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin f60 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin g30 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin g60 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin l30 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin l60 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin l90 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin m60 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin n60 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin t35 Firmware: before 8.10 (fixed in 8.10)
• Ge Multilin t60 Firmware: before 8.10 (fixed in 8.10)

Published 2022-03-23. Last modified 2026-06-17.