GE Vernova EnerVista UR Setup Missing Authentication Vulnerability Allowing Man-in-the-Middle Attacks

A vulnerability exists in the GE Vernova EnerVista UR Setup application, specifically versions 7.0 through 8.60. This vulnerability allows authentication bypass due to the absence of SSH server authentication. As a result, an attacker could exploit this flaw to perform a man-in-the-middle attack on the network, potentially intercepting credentials or injecting malicious traffic.

Impact

Exploitation of this vulnerability could lead to a man-in-the-middle attack, allowing interception of credentials or injection of malicious traffic.

Remediation

Users are advised to update the EnerVista UR Setup software to the latest version.