Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR...

6.1 CVSS

Vulnerability Description

Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware. The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration check to be bypassed.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-27257

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from GE Vernova

View All →

CVE-2025-9038

S1 Agile Privilege Escalation

High 7.5

CVE-2025-7719

Smallworld SWMFS Arbitrary File Ops

Medium 5.3

CVE-2025-3223

WorkstationST EGD Configuration Server Path Traversal Vulnerability

Medium 5.9

CVE-2025-3222

Smallworld SWMFS Improper Authentication

Critical 9.3

CVE-2025-27256

Missing Authentication for Critical Function vulnerability in GE Vernova Enervista...

High 8.3

Affected Vendor

GE Vernova

View all reports →

Affected Software

N60 multilin, B30 Multilin, B90 Multilin, C30 Multilin, C60 Multilin, C70 Multilin, C95 Multilin, D30 Multilin, D60 Multilin, F35 Multilin, F60 Multilin, G30 Multilin, G60 Multilin, L30 Multilin, L60 Multilin, L90 Multilin, M60 Multilin, T35 Multilin, T60 Multilin

Vulnerable Versions:

7.0