CVE:CVE-2017-7905
CNNVD:CNNVD-201705-173
General Electric(GE) Multilin SR 750 Feeder Protection Relay等都是美国通用电气（GE）公司继电器产品。
多款GE产品存在安全漏洞。远程攻击者可利用该漏洞获取用户的弱加密密码，及未授权的访问权限。以下产品和版本受到影响：使用7.47之前版本固件的Multilin SR 750 Feeder Protection Relay；使用7.47版本固件的SR 760 Feeder Protection Relay；使用5.23版本固件的SR 469 Motor Protection Relay；使用4.06版本固件的SR 489 Generator Protection Relay；使用5.23版本固件的SR 745 Transformer Protection Relay；使用6.0及之前版本固件的SR 369 Motor Protection Relay；使用6.0及之前版本固件的Multilin Universal Relay；Multilin URplus (D90、C90、B95)。
solution:Upgrade ge multilin_sr_750_feeder_protection_relay_firmware to a higher version than 5.02,and avoid the version (,5.02]; Upgrade ge multilin_sr_760_feeder_protection_relay_firmware to a higher version than 5.02,and avoid the version (,5.02]; Upgrade ge multilin_sr_469_motor_protection_relay_firmware to a higher version than 2.90,and avoid the version (,2.90]; Upgrade ge multilin_sr_489_generator_protection_relay_firmware to a higher version than 1.53,and avoid the version (,1.53]; Upgrade ge multilin_sr_745_transformer_protection_relay_firmware to a higher version than 2.85,and avoid the version (,2.85]; Upgrade ge multilin_sr_369_motor_protection_relay_firmware to a higher version than -; Upgrade ge multilin_universal_relay_firmware to a higher version than 6.0,and avoid the version (,6.0]; Upgrade ge multilin_urplus_d90_firmware to a higher version than -; Upgrade ge multilin_urplus_c90_firmware to a higher version than -; Upgrade ge multilin_urplus_b95_firmware to a higher version than -