GE Vernova EnerVista UR Setup Privilege Escalation Vulnerability Due to Hard-Coded Credentials

A vulnerability allowing privilege escalation has been identified in GE Vernova EnerVista UR Setup version 8.42. This issue arises from the use of hard-coded credentials, which encrypt the local user database with a password that can be extracted by analyzing the application code.

Impact

Exploitation of this vulnerability allows an attacker to bypass authentication, potentially leading to unauthorized access or privileges within the application.

Remediation

Users are advised to update the EnerVista UR Setup software to the latest released version.