Security Advisory

CVE-2025-27254

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-10 09:05:08
Last updated 2025-10-07 14:18:35
Assigner Nozomi
State PUBLISHED

Description

CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass.  The softwares startup authentication can be disabled by altering a Windows registry setting that any user can modify.