High WID-SEC-2025-2926 2 CVEs

Eaton UPS Companion Software: Mehrere Schwachstellen ermöglichen Codeausführung

Published Dec 28, 2025 · Updated Dec 28, 2025 · de-DE

Vendor: Eaton Product: UPS

Summary

Ein Angreifer kann mehrere Schwachstellen in Eaton UPS Companion Software ausnutzen, um beliebigen Programmcode auszuführen.

Product

Eaton ist ein Anbieter von unterbrechungsfreien Stromversorgungen (USV).

Vulnerabilities 2

High 8.6

CVE-2025-59887

Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code exe…

Eaton Eaton UPS Companion Software

Dec 26, 2025
Medium 6.7

CVE-2025-59888

Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution…

Eaton UPS Companion software

Dec 26, 2025

Revision history

2025-12-28 #1
Initiale Fassung

References

Eaton Vulnerability Advisory vom 2025-12-28
https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1026.pdf
EU Vulnerability Database vom 2025-12-28
https://euvd.enisa.europa.eu/enisa/EUVD-2025-205428
EU Vulnerability Database vom 2025-12-28
https://euvd.enisa.europa.eu/enisa/EUVD-2025-205429