CVE-2021-27438: Ge Reason DR60 Firmware

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1).

Affected products

  • Ge Reason DR60 Firmware: before 02a04.1 (fixed in 02a04.1)

Published 2021-03-25. Last modified 2026-06-17.