What is the CVSS score of CVE-2025-27255?

CVE-2025-27255 has a CVSS 3.1 base score of 8.0 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of GE Vernova EnerVista UR Setup are affected by CVE-2025-27255?

Organizations using Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup face notable risk from CVE-2025-27255, a hard-coded credentials vulnerability rated CVSS 8.0.

How to fix or mitigate CVE-2025-27255?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Audit authentication configurations and rotate any potentially compromised credentials.

GE Vernova EnerVista UR Setup CVE-2025-27255

HIGH

Use of Hard-coded Credentials (CWE-798)

2025-03-10 prodsec@nozominetworks.com

Privilege Escalation

8.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.0 HIGH

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 19:50 vuln.today

CVE Published

Mar 10, 2025 - 09:15 nvd

HIGH 8.0

DescriptionCVE.org

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code.

AnalysisAI

Technical ContextAI

Classified as CWE-798 (Use of Hard-coded Credentials). Affects GE Vernova EnerVista UR Setup. Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code.