How to fix CVE-2025-27256?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Audit authentication configurations and rotate any potentially compromised credentials.

Is GE Vernova Enervista UR Setup affected by CVE-2025-27256?

CVE-2025-27256 presents notable security risk, a missing authentication vulnerability rated CVSS 8.3. Attackers could bypass security controls to gain unauthorized access to protected resources and sensitive data.

GE Vernova Enervista UR Setup CVE-2025-27256

HIGH

Missing Authentication for Critical Function (CWE-306)

2025-03-10 [email protected]

Authentication Bypass

8.3

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 19:50 vuln.today

CVE Published

Mar 10, 2025 - 09:15 nvd

HIGH 8.3

DescriptionNVD

Missing Authentication for Critical Function vulnerability in GE Vernova Enervista UR Setup application allows Authentication Bypass due to a missing SSH server authentication. Since the client connection is not authenticated, an attacker may perform a man-in-the-middle attack on the network.

AnalysisAI

GE Vernova Enervista UR Setup application is affected by missing authentication for critical function (CVSS 8.3).

Technical ContextAI

This vulnerability (CWE-306: Missing Authentication for Critical Function) affects GE Vernova Enervista UR Setup application. Missing Authentication for Critical Function vulnerability in GE Vernova Enervista UR Setup application allows Authentication Bypass due to a missing SSH server authentication. Since the client connection is not authenticated, an attacker may perform a man-in-the-middle attack on the network.

Affected ProductsAI

Product: GE Vernova Enervista UR Setup application.

RemediationAI

Monitor vendor advisories for a patch.

CVE-2025-27256 vulnerability details – vuln.today

Back