How to fix CVE-2025-27255?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Audit authentication configurations and rotate any potentially compromised credentials.

CVE-2025-27255

HIGH

2025-03-10 [email protected]

Privilege Escalation

8.0

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 19:50 vuln.today

CVE Published

Mar 10, 2025 - 09:15 nvd

HIGH 8.0

DescriptionNVD

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code.

AnalysisAI

Technical ContextAI

Classified as CWE-798 (Use of Hard-coded Credentials). Affects GE Vernova EnerVista UR Setup. Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code.

Affected ProductsAI

Product: GE Vernova EnerVista UR Setup.

RemediationAI

Monitor vendor advisories for a patch.

CVE-2025-27255 vulnerability details – vuln.today

Back