Description (CNA)
CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass. The software's startup authentication can be disabled by altering a Windows registry setting that any user can modify.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GE Vernova / EnerVista UR Setup | affected 8.42 |
CWE
CWE-282
References
- https://www.gevernova.com/grid-solutions/app/DownloadFile.aspx?prod=urfamily&type=21&file=76
- https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-27254
ADP enrichment
No English description supplied.
No references supplied.