Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-27257

Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Nozomi

Description

Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware. The firmware signature verification is enforced only on the client-side dedicated software Enervista UR Setup, allowing the integration check to be bypassed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GE Vernova N60 multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova B30 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova B90 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova C30 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova C60 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova C70 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova C95 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova D30 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova D60 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova F35 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova F60 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova G30 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova G60 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova L30 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova L60 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova L90 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova M60 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova T35 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova T60 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

GE Vernova M60 Multilin

Default version status: unaffected

  • 7.0 to ≤ 8.60affected

References