CVE-2025-27257
Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware.
The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration check to be bypassed.
The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration check to be bypassed.
Vendor
-
Product
-
CWE
Yayın Tarihi
2025-03-10 09:15:11
Güncelleme
2025-03-12 12:15:15
Source Identifier
prodsec@nozominetworks.com
KEV Date Added
-