CVE-2025-27254CWE-282

CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass

High · published March 10, 2025

CVSS v3.1
8.0
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass.

The software's startup authentication can be disabled by altering a Windows registry setting that any user can modify.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00188 · 8.0th percentile
Weakness
CWE-282 · Improper Ownership Management
Published
2025-03-10T09:05Z
EPSS history
Timeline
  • 10 MAR 09:05Z
    CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass
    cvelistv5