CVE-2025-48395: Path Traversal
An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version of NMC G2 which is available on the Eaton download center.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48395?
CVE-2025-48395 is considered a security vulnerability that allows authenticated and privileged attackers to modify non-sensitive files.
How do I fix CVE-2025-48395?
To remediate CVE-2025-48395, upgrade to the latest version of Eaton NMC G2 available on the Eaton download center.
What types of access are required to exploit CVE-2025-48395?
CVE-2025-48395 can be exploited by attackers who have authenticated and privileged access.
What are the potential impacts of CVE-2025-48395?
The impact of CVE-2025-48395 includes unauthorized modification of non-sensitive files, which could affect system integrity.
Is there a patch for CVE-2025-48395?
Yes, a patch for CVE-2025-48395 is included in the latest version of Eaton NMC G2.