CVE-2025-27255
CVSS 3.1 Score 8 of 10 (high)
Details
Published Mar 10, 2025
Updated: Mar 12, 2025
CWE ID 798
Summary
CVE-2025-27255 is aPrivilege Escalation vulnerability affecting GE Vernova EnerVista UR Setup. The issue arises due to the use of hard-coded credentials within the application. An attacker who gains access to the system can retrieve the hardcoded password for the local user database encryption key. This allows the attacker to decrypt and access the user database, potentially gaining elevated privileges within the system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- EnerVista UR Setup
Affected Vendors
- GE Energy