What’s Vulnerable › Vulnerabilities

CVE-2021-27454

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-03-25 · updated 2026-06-17
• Weakness: CWE-250

Description

The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1).

Affected products

• Reason DR60: before 02a04.1 — fixed in 02a04.1

How to fix

Upgrade to a fixed version: Reason DR60 02a04.1. Check the vendor advisory for mitigations.

References

• https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03
• https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03

Get alerted when CVE-2021-27454 or the next vulnerability affects your stack