CVE-2025-48397

The privileged user could log in without sufficient credentials after enabling an application protocol. This security issue has been fixed in the latest script patch latest version of of Eaton BLSS (7.3.0.SCP004).

Score

CVSS 3.1 7.1 High

Status

Deferred - CybersecurityCOE@eaton.com

Published

2025-11-03

Last modified

2026-10-18

Weaknesses

CWE-306

Affected products

• Eaton Brightlayer Software Suite Blss (Eaton)

References

• https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1030.pdf