PatchTheCVEmultilin c70 firmware vulnerabilities and fixes
Recent CVEs affecting multilin c70 firmware, with upgrade or downgrade steps. 6 tracked.
Also searched as: multilinc70firmware.
multilin c70 firmware has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 6. Most recent: 2022-03-23. Highest priority: CVE-2021-27428 (score 56/100).
- CVE-2021-27428 CRITICAL 9.8 UPGRADE UPGRADE GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration too
- CVE-2021-27426 CRITICAL 9.8 UPGRADE UPGRADE GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling o
- CVE-2021-27424 MEDIUM 5.3 UPGRADE UPGRADE GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide
- CVE-2021-27422 HIGH 7.5 UPGRADE UPGRADE GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol
- CVE-2021-27420 MEDIUM 5.3 UPGRADE UPGRADE GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported
- CVE-2021-27418 MEDIUM 5.3 UPGRADE UPGRADE GE UR firmware versions prior to version 8.1x supports web interface with read-only access
FAQ
How do I fix multilin c70 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is multilin c70 firmware being exploited right now?
None of the tracked multilin c70 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which multilin c70 firmware CVE should I patch first?
CVE-2021-27428 currently ranks highest (56/100): GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration too.