CVE-2025-27255: High severity GE Vernova Enervista UR Setup vulnerability
Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27255?
CVE-2025-27255 has a high severity rating as it allows for privilege escalation due to the use of hard-coded credentials.
How do I fix CVE-2025-27255?
To fix CVE-2025-27255, update GE Vernova EnerVista UR Setup to the latest version where the hard-coded credentials issue has been addressed.
What software is affected by CVE-2025-27255?
CVE-2025-27255 affects GE Vernova EnerVista UR Setup.
What kind of vulnerability is CVE-2025-27255?
CVE-2025-27255 is classified as a use of hard-coded credentials vulnerability.
Why is CVE-2025-27255 a concern for users?
CVE-2025-27255 is a concern because it enables attackers to gain unauthorized access and escalate privileges within the affected software.