PT-2025-44757 · Eaton · Eaton Blss

Published 2025-11-03 · Updated 2025-11-08 · CVE-2025-48396

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eaton BLSS versions prior to 7.3.0.SCP004

Description Improper validation of the file upload functionality in Eaton BLSS can lead to arbitrary code execution.

Recommendations Update to Eaton BLSS version 7.3.0.SCP004 or later.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-48396

Affected Products

Eaton Blss

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-48396 · Security Note
• https://t.me/cveNotify/141302 · Telegram Post
• https://https//www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1021.pdf · Note
• https://t.me/cveNotify/141295 · Telegram Post
• https://t.me/CVEtracker/36408 · Telegram Post
• https://eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1021.pdf · Note
• https://twitter.com/cracbot/status/1987112920652845539 · Twitter Post
• https://twitter.com/cracbot/status/1986750533567492273 · Twitter Post