CVE-2025-9038 | THREATINT

Description

Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile Configuration Software: 3.1 and previous version.

PUBLISHED Reserved 2025-08-14 | Published 2025-09-22 | Updated 2025-09-24 | Assigner GE_Vernova

HIGH: 7.5CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N

Problem types

CWE-269 Improper Privilege Management

Product status

Default status

unaffected

3.1 and previous version

affected

Credits

Charit Misra from DNV, Netherlands reporter

References

www.gevernova.com/...urces/products/support/ges-2025-001.pdf

cve.org (CVE-2025-9038)

nvd.nist.gov (CVE-2025-9038)

Download JSON