PT-2025-10564 · Ge · Ge Vernova Ur Ied

Diego Giubertoni · Published 2025-03-10 · Updated 2025-10-07 · CVE-2025-27253

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions GE Vernova UR IED family devices versions 7.0 through 8.60

Description The issue is related to improper input validation, which allows an attacker to establish a TCP connection through port forwarding. This lack of validation for IP addresses and ports may enable the attacker to bypass firewall rules or send malicious traffic within the network.

Recommendations For GE Vernova UR IED family devices versions 7.0 through 8.60, consider restricting access to the port forwarding feature until a proper fix is applied, and ensure that all incoming and outgoing traffic is thoroughly validated to prevent malicious connections.

Fix

RCE

Weakness Enumeration

CWE-15

CWE-20

Related Identifiers

BDU:2025-07184

CVE-2025-27253

Affected Products

Ge Vernova Ur Ied

References · 11

• https://bdu.fstec.ru/vul/2025-07184 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-27253 · Security Note
• https://t.me/cvenotify/114034 · Telegram Post
• https://nozominetworks.com/labs/vulnerability-advisories-cve-2025-27253 · Note
• https://t.me/cveNotify/137662 · Telegram Post
• https://t.me/cvetracker/18789 · Telegram Post
• https://twitter.com/CVEnew/status/1899029540355358981 · Twitter Post
• https://gevernova.com/grid-solutions/passport/login.aspx?ReturnUrl=%2fgrid-solutions%2fapp%2fDownloadFile.aspx%3fprod%3durfamily%26type%3d21%26file%3d76 · Note
• https://gevernova.com/grid-solutions/app/DownloadFile.aspx?prod=urfamily&type=21&file=76 · Note
• https://t.me/cvedetector/19949 · Telegram Post
• https://vulners.com/cve/CVE-2025-27253 · Note