Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-22492 EUVD-2025-5500GHSA-c33f-m87q-92qc

Insecure storage of connection strings in FRS

Published Feb 28, 2025 · Updated Feb 28, 2025 · Assigned by Eaton

Description

The connection string visible to users with access to FRSCore database on Foreseer Reporting Software (FRS) VM, this
string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS.

Affected products

VendorProductAffectedFixed
Eaton Foreseer Reporting Software (FRS) < 1.5.100 1.5.100

References