← Back

CVE-2025-48397

nvd nist
Published: Nov 3, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: CybersecurityCOE@eaton.com (Secondary)

Description

The privileged user could log in without sufficient credentials after enabling an application protocol. This security issue has been fixed in the latest script patch latest version of of Eaton BLSS (7.3.0.SCP004).

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (1)

Source: CybersecurityCOE@eaton.com

Timeline

No history available yet.