CVE-2025-27256: High severity GE Vernova Enervista UR Setup vulnerability
Missing Authentication for Critical Function vulnerability in GE Vernova Enervista UR Setup application allows Authentication Bypass due to a missing SSH server authentication. Since the client connection is not authenticated, an attacker may perform a man-in-the-middle attack on the network.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27256?
CVE-2025-27256 is a critical vulnerability due to its potential for allowing authentication bypass and man-in-the-middle attacks.
How do I fix CVE-2025-27256?
To fix CVE-2025-27256, configure proper SSH authentication settings in the GE Vernova Enervista UR Setup application.
What are the consequences of CVE-2025-27256?
The consequences of CVE-2025-27256 include unauthorized access and data interception on the affected network.
Who is affected by CVE-2025-27256?
CVE-2025-27256 primarily affects users of the GE Vernova Enervista UR Setup application that do not implement proper SSH authentication.
Can CVE-2025-27256 lead to a man-in-the-middle attack?
Yes, CVE-2025-27256 can enable a man-in-the-middle attack due to missing authentication for the SSH server.