GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.
Weakness
The product, by default, initializes an internal variable with an insecure or less secure value than is possible.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Multilin_b30_firmware | Ge | * | 8.10 (excluding) |