GE UR bootloader binary Version 7.00, 7.01 and 7.02...
Moderate severity
Unreviewed
Published
Mar 24, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Mar 23, 2022
Published to the GitHub Advisory Database
Mar 24, 2022
Last updated
Jan 27, 2023
GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR.
References