CVE-2025-27255

8.0 highEPSS 0.2%

High (8.0). EPSS 0.2% chance of exploitation in the next 30 days.

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2025-03-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.gevernova.com/grid-solutions/app/DownloadFile.aspx?prod=urfamily&type=21&file=76
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-27255

Check your stack JSON