Eaton Eaton Brightlayer Software Suite (BLSS) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Eaton Eaton Brightlayer Software Suite (BLSS): 2 record(s), with affected versions and fixes.
CVE-2025-48397
High · 7.1
CWE-306 Nov 3, 2025
The privileged user could log in without sufficient credentials after enabling an application...
The privileged user could log in without sufficient credentials after enabling an application protocol. This security issue has been fixed in the latest script patch latest version of of Eaton BLSS (7.3.0.SCP004).
CVE-2025-48396
High · 8.3
CWE-434 Nov 3, 2025
Arbitrary code execution is possible due to improper validation of the file upload functionality...
Arbitrary code execution is possible due to improper validation of the file upload functionality in Eaton BLSS. This security issue has been fixed in the latest script patch latest version of of Eaton BLSS (7.3.0.SCP004).