EnerVista UR Setup vulnerabilities
3 known vulnerabilities in EnerVista UR Setup from GE Vernova. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.3 High severity
EnerVista UR Setup: Missing Authentication for Critical Functionality
Missing Authentication for Critical Function vulnerability in GE Vernova Enervista UR Setup application allows Authentication Bypass due to a missing SSH server authentication. Since the client connection is not authenticated, an attacker may perform a man-in-
- 8.0 High severity
EnerVista UR Setup: Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code.
- 8.0 High severity
EnerVista UR Setup: Improper Ownership Management
CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass. The software's startup authentication can be disabled by altering a Windows registry setting that any user can modify.