CVE-2025-27257
Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware. The firmware signat…
Published: 2025-03-10 · CVSS: 6.1 · CVSS 3.1
Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware. The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration check to be bypassed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7