CVE-2021-27440: Ge Reason DR60 Firmware

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1).

Affected products

• Ge Reason DR60 Firmware: before 02a04.1 (fixed in 02a04.1)

Published 2021-03-25. Last modified 2026-06-17.