CVE-2025-48396: Malicious File Upload
Published Nov 3, 2025
·Updated
Arbitrary code execution is possible due to improper validation of the file upload functionality in Eaton BLSS. This security issue has been fixed in the latest script patch latest version of of Eaton BLSS (7.3.0.SCP004).
Affected Software
1 affected component
Eaton BLSS<7.3.0.SCP004
Event History
Nov 3, 2025
CVE Published
via MITRE·07:57 AM
Data Sourced
via MITRE·07:57 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-48396?
CVE-2025-48396 is classified as a critical vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2025-48396?
To mitigate CVE-2025-48396, it is recommended to apply the latest security updates provided by Eaton for the BLSS software.
3
What type of vulnerability is CVE-2025-48396?
CVE-2025-48396 is an arbitrary code execution vulnerability resulting from improper validation of file uploads.
4
Which product is affected by CVE-2025-48396?
The affected product for CVE-2025-48396 is Eaton BLSS.
5
What are the potential impacts of CVE-2025-48396?
The impacts of CVE-2025-48396 include the possibility for attackers to execute arbitrary code on affected systems.