← Database

CVE-2025-27254

HIGH CVSS: 8.0 Published: 2025-03-10 Modified: 2026-06-17

Description

CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass.  The software's startup authentication can be disabled by altering a Windows registry setting that any user can modify.

Affected Platforms

Unknown

Weakness Type

CWE-282

References