CVE-2025-27257
Severity Score
6.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware.
The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration check to be bypassed.
Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware. The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration check to be bypassed.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2025-02-21 CVE Reserved
- 2025-03-10 CVE Published
- 2025-03-11 EPSS Updated
- 2025-03-12 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-345: Insufficient Verification of Data Authenticity
CAPEC
- CAPEC-638: Altered Component Firmware
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.gevernova.com/grid-solutions/app/DownloadFile.aspx?prod=urfamily&type=21&file=76 | ||
| https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-27257 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| GE Vernova Search vendor "GE Vernova" | N60 Multilin Search vendor "GE Vernova" for product "N60 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "N60 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | B30 Multilin Search vendor "GE Vernova" for product "B30 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "B30 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | B90 Multilin Search vendor "GE Vernova" for product "B90 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "B90 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | C30 Multilin Search vendor "GE Vernova" for product "C30 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "C30 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | C60 Multilin Search vendor "GE Vernova" for product "C60 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "C60 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | C70 Multilin Search vendor "GE Vernova" for product "C70 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "C70 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | C95 Multilin Search vendor "GE Vernova" for product "C95 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "C95 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | D30 Multilin Search vendor "GE Vernova" for product "D30 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "D30 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | D60 Multilin Search vendor "GE Vernova" for product "D60 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "D60 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | F35 Multilin Search vendor "GE Vernova" for product "F35 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "F35 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | F60 Multilin Search vendor "GE Vernova" for product "F60 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "F60 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | G30 Multilin Search vendor "GE Vernova" for product "G30 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "G30 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | G60 Multilin Search vendor "GE Vernova" for product "G60 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "G60 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | L30 Multilin Search vendor "GE Vernova" for product "L30 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "L30 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | L60 Multilin Search vendor "GE Vernova" for product "L60 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "L60 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | L90 Multilin Search vendor "GE Vernova" for product "L90 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "L90 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | M60 Multilin Search vendor "GE Vernova" for product "M60 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "M60 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | T35 Multilin Search vendor "GE Vernova" for product "T35 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "T35 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | T60 Multilin Search vendor "GE Vernova" for product "T60 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "T60 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||
| GE Vernova Search vendor "GE Vernova" | M60 Multilin Search vendor "GE Vernova" for product "M60 Multilin" | >= 7.0 <= 8.60 Search vendor "GE Vernova" for product "M60 Multilin" and version " >= 7.0 <= 8.60" | en |
Affected
| ||||||