CVE-2021-27430: Ge Ur Bootloader Binary

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR.

Affected products

• Ge Ur Bootloader Binary: version 7.00 only; version 7.01 only; version 7.02 only

Published 2022-03-23. Last modified 2026-06-17.