CVE-2025-27254

CWE-282 Improper Ownership Management in GE Vernova EnerVista UR Setup allows Authentication Bypass.  The softwares startup authentication can be disabled by altering a Windows registry setting that any user can modify.

Weakness

The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.

Potential Mitigations

Related Attack Patterns

• https://cwe.mitre.org/data/definitions/17.html
• https://cwe.mitre.org/data/definitions/35.html

References

• https://www.gevernova.com/grid-solutions/app/DownloadFile.aspx?prod=urfamily\u0026type=21\u0026file=76
• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-27254