CVE-2025-48393
The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle at…
Published: 2025-08-06 · CVSS: 5.7 · CVSS 3.1
The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton G4 PDU which is available on the Eaton download center.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7