Ge Reason DR60 Firmware vulnerabilities

3 CVEs affecting Ge Reason DR60 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-27454, published 2021-03-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-27440, published 2021-03-25. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1).
CVE-2021-27438, published 2021-03-25. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1).
CVE-2021-27454, published 2021-03-25. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all…