CVE-2025-27255 in EnerVista UR Setup

Riassunto

di MITRE • 10/03/2025

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: Nozomi
• Prenotare: 21/02/2025
• Divulgazione: 10/03/2025
• Moderazione: accettato
• Voce: VDB-299071
• CPE: pronto
• CWE: CWE-798 (confermato)
• CVSS: 8.0 (CNA)
• EPSS: 0.00149
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-27255
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-27255
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-27255/