CVE-2025-67450: Ups Companion: güvenlik açığı

Açıklama (NVD)

Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with access to the software package could perform arbitrary code execution . This security issue has been fixed in the latest version of EUC which is available on the Eaton download center.

Özet bilgiler

Ürün

Eaton Ups Companion

CVSS v3.1

7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

%0,15 (yüzdelik 4)

CWE

CWE-427

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• www.eaton.com
• CWE-427