PT-2025-10565 · Ge · Ge Vernova Enervista Ur Setup

Diego Giubertoni · Published 2025-03-10 · Updated 2025-10-07 · CVE-2025-27254

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions GE Vernova EnerVista UR Setup (affected versions not specified)

Description The issue concerns an improper authentication vulnerability that allows authentication bypass. It is possible to disable the software's startup authentication by modifying a Windows registry setting, which can be altered by any user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

CWE-282

Related Identifiers

BDU:2025-07187

CVE-2025-27254

Affected Products

Ge Vernova Enervista Ur Setup

References · 17

• https://bdu.fstec.ru/vul/2025-07187 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-27254 · Security Note
• https://t.me/cvedetector/19945 · Telegram Post
• https://twitter.com/CVETracker/status/1899188696156385454 · Twitter Post
• https://twitter.com/cracbot/status/1900502249551581238 · Twitter Post
• https://t.me/cvenotify/114424 · Telegram Post
• https://gevernova.com/grid-solutions/app/DownloadFile.aspx?prod=urfamily&type=21&file=76 · Note
• https://twitter.com/CVEnew/status/1899029539537502516 · Twitter Post
• https://t.me/cveNotify/137663 · Telegram Post
• https://vulners.com/cve/CVE-2025-27254 · Note
• https://twitter.com/cracbot/status/1900139868711497884 · Twitter Post
• https://t.me/latest_high_impact_cve/1942 · Telegram Post
• https://t.me/cvetracker/18790 · Telegram Post
• https://nozominetworks.com/labs/vulnerability-advisories-cve-2025-27254 · Note
• https://gevernova.com/grid-solutions/passport/login.aspx?ReturnUrl=%2fgrid-solutions%2fapp%2fDownloadFile.aspx%3fprod%3durfamily%26type%3d21%26file%3d76 · Note