CVE-2025-48397: High severity Eaton BLSS vulnerability
The privileged user could log in without sufficient credentials after enabling an application protocol. This security issue has been fixed in the latest script patch latest version of of Eaton BLSS (7.3.0.SCP004).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48397?
CVE-2025-48397 is categorized as a high-severity vulnerability due to the potential for unauthorized login by privileged users.
How do I fix CVE-2025-48397?
To fix CVE-2025-48397, apply the latest script patch for Eaton BLSS, ensuring the version is updated beyond 7.3.0.SCP004.
Who is affected by CVE-2025-48397?
CVE-2025-48397 affects users of Eaton BLSS versions up to, but not including, 7.3.0.SCP004.
What issue does CVE-2025-48397 address?
CVE-2025-48397 addresses a security issue that allows a privileged user to log in without adequate credentials after enabling an application protocol.
When was CVE-2025-48397 disclosed?
CVE-2025-48397 was disclosed in the latest security bulletins issued by Eaton.