CVE-2025-27253

Name of the Vulnerable Software and Affected Versions GE Vernova UR IED family devices versions 7.0 through 8.60

Description The issue is related to improper input validation, which allows an attacker to establish a TCP connection through port forwarding. This lack of validation for IP addresses and ports may enable the attacker to bypass firewall rules or send malicious traffic within the network.

Recommendations For GE Vernova UR IED family devices versions 7.0 through 8.60, consider restricting access to the port forwarding feature until a proper fix is applied, and ensure that all incoming and outgoing traffic is thoroughly validated to prevent malicious connections.