GE Vernova UR IED Family Improper Input Validation Vulnerability Allowing TCP Port Forwarding

A vulnerability exists in GE Vernova UR IED family devices, specifically in versions 7.0 prior to 8.60, due to improper input validation. This flaw enables an attacker to establish a TCP connection through port forwarding by exploiting the lack of validation on IP addresses and ports. As a result, attackers may bypass firewall rules or introduce malicious traffic into the network.

Impact

Exploitation of this vulnerability could lead to bypassing firewall rules or sending malicious traffic over the network.

Remediation

Users are advised to update the firmware of affected devices to the latest version.