PT-2025-53454 · Eaton · Eaton Ups Companion

Published 2025-12-26 · Updated 2025-12-31 · CVE-2025-67450

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eaton UPS Companion software (affected versions not specified)

Description The Eaton UPS Companion software contains a flaw related to insecure library loading. An attacker who has access to the software package could potentially execute arbitrary code.

Recommendations Update to the latest version of Eaton UPS Companion software, available on the Eaton download center.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-67450

Affected Products

Eaton Ups Companion

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-67450 · Security Note
• https://osv.dev/vulnerability/CVE-2025-67450 · Vendor Advisory
• https://eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1027.pdf · Vendor Advisory
• https://twitter.com/cracbot/status/2006319472727277953 · Twitter Post
• https://t.me/cveNotify/146867 · Telegram Post
• https://twitter.com/CVEnew/status/2004457718036512968 · Twitter Post
• https://t.me/CVEtracker/40704 · Telegram Post