CVE-2025-3222CWE-287

CVE-2025-3222

published November 7, 2025

CVSS
9.3
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue affects Smallworld: 5.3.3 and prior versions for Linux, and 5.3.4. and prior versions for Windows.

The record
Technical detail
CVSS
9.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.3th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-11-07T22:15Z
References (1)
https://www.gevernova.com/content/dam/cyber_security/global/en_US/pdfs/SecurityAdvisory_ImproperAuthentication_SWMFS.pdf · [email protected]
EPSS history
Timeline
  • 07 NOV 16:28Z
    Smallworld SWMFS Improper Authentication
    cvelistv5