High severity7.1NVD Advisory· Published Nov 3, 2025· Updated Apr 15, 2026

CVE-2025-48397

Description

The privileged user could log in without sufficient credentials after enabling an application protocol. This security issue has been fixed in the latest script patch latest version of of Eaton BLSS (7.3.0.SCP004).

Affected products

Eaton/BLSSllm-create
Range: <=7.3.0.SCP004

Patches

Vulnerability mechanics

References

www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1030.pdfnvd

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000