PatchTheCVECVE-2021-27454: The software performs an operation at a privilege level higher than the minimum level required, which creates
CVE-2021-27454 is a high-severity flaw (CVSS 7.8) affecting reason dr60 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1).
Why this priority
- High severity
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2021-27454?
reason dr60 firmware: upgrade to 02a04.1. Exact commands for each OS are on this page.
Is CVE-2021-27454 being exploited?
CVE-2021-27454 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2021-27454 affect?
CVE-2021-27454 affects reason dr60 firmware. Severity is high (CVSS 7.8). The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1).
How urgent is CVE-2021-27454?
Priority 31/100. High severity
Related CVEs
- CVE-2021-27440 CRITICAL 9.8 UPGRADE The software contains a hard-coded password it uses for its own inbound authentication or for outbound communi
- CVE-2021-27438 HIGH 8.8 UPGRADE The software contains a hard-coded password it uses for its own inbound authentication or for outbound communi