Security Advisory

CVE-2025-27255

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-10 09:05:17
Last updated 2025-03-12 11:10:21
Assigner Nozomi
State PUBLISHED

Description

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code.