We strongly recommend that users with impacted firmware versions update their UR devices to UR
firmware version 8.70, released in November 2025, to resolve these vulnerabilities. We also recommend
upgrading the EnerVista UR Setup configuration tool to version 8.70 or greater.
Enervista UR Setup software is backward compatible, users can upgrade it to version 8.70,
independently of upgrading their UR IED to FW v870.
Configurations
Workarounds
As a workaround, GE Vernova recommends having secure infrastructure in place, which can protect the
system. We also recommend that customers protect their digital devices using a defense-in-depth
strategy. This includes, but is not limited to, placing digital devices inside the control system network
security perimeter, access controls, robust network monitoring (such as Intrusion Detection System) and
other mitigation techniques in place. Please refer to the product secure deployment guide.
It is essential for organizations to prioritize cybersecurity measures, including regular vulnerability
assessments and prompt application of security patches.