Ge MU320E Firmware vulnerabilities

3 CVEs affecting Ge MU320E Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-27452, published 2021-03-25.

More from Ge.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-27452, published 2021-03-25. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E (all firmware versions prior to v04A00.1).
• CVE-2021-27448, published 2021-03-25. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E (all firmware versions prior to v04A00.1).
• CVE-2021-27450, published 2021-03-25. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to additional misconfiguration or be leveraged as…