CVE-2021-27418 — GE UR family input validation
GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross…
Published: 2022-03-23 · CVSS: 5.3 · CVSS 3.1
GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Firmware web server does not perform HTML encoding of user-supplied strings.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7