CVE-2025-27255CWE-798

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation

High · published March 10, 2025

CVSS v3.1
8.0
EPSS
0%
Percentile
4.0
In the wild
Unconfirmed
What it is

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00152 · 4.0th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-03-10T09:05Z
EPSS history
Timeline
  • 10 MAR 09:05Z
    Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation
    cvelistv5