GE Vernova vulnerabilities
We track 5 vulnerabilities in GE Vernova products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2025.
Latest GE Vernova vulnerabilities
- 9.3 Critical severity
Smallworld: Improper Authentication
Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue affects Smallworld: 5.3.3 and prior versions for Linux, and 5.3.4. and prior versions for Windows.
- 7.5 High severity
S1 Agile Configuration Software: Improper Privilege Management
Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile Configuration Software: 3.1 and previous version.
- 8.3 High severity
EnerVista UR Setup: Missing Authentication for Critical Functionality
Missing Authentication for Critical Function vulnerability in GE Vernova Enervista UR Setup application allows Authentication Bypass due to a missing SSH server authentication. Since the client connection is not authenticated, an attacker may perform a man-in-
- 8.0 High severity
EnerVista UR Setup: Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code.
- 8.0 High severity
EnerVista UR Setup: Improper Ownership Management
CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass. The software's startup authentication can be disabled by altering a Windows registry setting that any user can modify.