We strongly recommend that users with impacted firmware versions update their UR devices to UR firmware version 8.70, released in November 2025, to resolve these vulnerabilities. We also recommend upgrading the EnerVista UR Setup configuration tool to version 8.70 or greater. Enervista UR Setup software is backward compatible, users can upgrade it to version 8.70, independently of upgrading their UR IED to FW v870.

As a workaround, GE Vernova recommends having secure infrastructure in place, which can protect the system. We also recommend that customers protect their digital devices using a defense-in-depth strategy. This includes, but is not limited to, placing digital devices inside the control system network security perimeter, access controls, robust network monitoring (such as Intrusion Detection System) and other mitigation techniques in place. Please refer to the product secure deployment guide. It is essential for organizations to prioritize cybersecurity measures, including regular vulnerability assessments and prompt application of security patches.