CVE-2025-59888: Medium severity Eaton UPS Companion vulnerability
Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the
file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59888?
CVE-2025-59888 is classified as a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2025-59888?
To fix CVE-2025-59888, update to the latest version of the Eaton UPS Companion software available on the Eaton download center.
What causes CVE-2025-59888?
CVE-2025-59888 is caused by improper quotation in search paths within the Eaton UPS Companion software installer.
Who is affected by CVE-2025-59888?
CVE-2025-59888 affects users of the Eaton UPS Companion software who have access to the file system.
What actions should I take if I cannot update to fix CVE-2025-59888?
If unable to update, restrict file system access to the impacted software to mitigate potential exploitation of CVE-2025-59888.