PT-2025-45468 · Ge Vernova · Ge Vernova Smallworld

Azael Martin + 3 · Published 2025-11-03 · Updated 2025-11-11 · CVE-2025-3222

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Vernova Smallworld versions prior to 5.3.3 (Linux) GE Vernova Smallworld versions prior to 5.3.4 (Windows)

Description An improper authentication issue exists in GE Vernova Smallworld on Windows and Linux platforms, potentially allowing authentication abuse.

Recommendations Update GE Vernova Smallworld to version 5.3.4 or later on Windows. Update GE Vernova Smallworld to version 5.3.3 or later on Linux.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2025-14066

CVE-2025-3222

Affected Products

Ge Vernova Smallworld

References · 5

• https://bdu.fstec.ru/vul/2025-14066 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-3222 · Security Note
• https://t.me/pentestingnews/70769 · Telegram Post
• https://t.me/cveNotify/142129 · Telegram Post
• https://gevernova.com/content/dam/cyber_security/global/en_US/pdfs/SecurityAdvisory_ImproperAuthentication_SWMFS.pdf · Note