PT-2025-32184 · Eaton · Eaton Cli

Harry Sintonen · CVE-2025-48394 · Published 2025-08-06 · Updated 2025-08-06

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Eaton CLI (affected versions not specified)

Description An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the command-line interface (CLI).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-48394

Affected Products

Eaton Cli

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-48394 · Security Note
• https://t.me/CVEtracker/29366 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1953152731952148701 · Twitter Post
• https://eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1002.pdf · Note
• https://twitter.com/CVEnew/status/1953120783183630346 · Twitter Post