CVE-2025-48393: Medium severity Eaton G4 PDU vulnerability

Published Aug 6, 2025

Updated

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton G4 PDU which is available on the Eaton download center.

Affected Software

1 affected component

Eaton G4 PDU

Event History

Aug 6, 2025

CVE Published

via MITRE·03:25 PM

Data Sourced

via MITRE·03:25 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-48393?

The severity of CVE-2025-48393 is critical due to the potential for a Man-in-the-middle attack.

How do I fix CVE-2025-48393?

To fix CVE-2025-48393, update to the latest version of the Eaton Firmware Upgrade available on the Eaton download center.

What type of attack can be exploited through CVE-2025-48393?

CVE-2025-48393 can be exploited to perform a Man-in-the-middle attack.

Which product is affected by CVE-2025-48393?

The affected product by CVE-2025-48393 is Eaton Firmware Upgrade.

Is there a patch available for CVE-2025-48393?

Yes, a patch for CVE-2025-48393 is available in the latest firmware version from Eaton.