CVE-2025-67450: High severity Eaton UPS Companion vulnerability
Published Dec 26, 2025
·Updated
Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with access to the software package
could perform arbitrary code execution . This security issue has been fixed in the latest version of EUC which is available on the Eaton download center.
Affected Software
2 affected components
Eaton UPS Companion
Eaton UPS Companion<3.0
Event History
Dec 26, 2025
CVE Published
via MITRE·06:59 AM
Data Sourced
via MITRE·06:59 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-67450?
CVE-2025-67450 has a high severity rating due to its potential for arbitrary code execution.
2
How do I fix CVE-2025-67450?
To fix CVE-2025-67450, upgrade to the latest version of Eaton UPS Companion available on the Eaton download center.
3
What software is affected by CVE-2025-67450?
CVE-2025-67450 affects the Eaton UPS Companion software.
4
Is CVE-2025-67450 being actively exploited?
As of now, there are no known reports of active exploitation for CVE-2025-67450.
5
Who is the vendor for CVE-2025-67450?
The vendor for CVE-2025-67450 is Eaton.