What is CVE-2025-48394?

CVE-2025-48394 is a medium-severity vulnerability in Eaton G4 Pdu, classified under Path Traversal. CVSS score: 4.7/10. Published 2025-08-06.

How severe is CVE-2025-48394?

Medium severity. CVSS v3 base score is 4.7 out of 10.

Is CVE-2025-48394 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in Eaton G4 Pdu

CVE-2025-48394

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version which is available on the Eaton download center.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.003 (21.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L.

Affected products

Eaton G4 Pdu — versions 0

Weakness classification (CWE)

CWE-22 — Path Traversal

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

CybersecurityCOE@eaton.com

Frequently asked questions

What is CVE-2025-48394?: CVE-2025-48394 is a medium-severity vulnerability in Eaton G4 Pdu, classified under Path Traversal. CVSS score: 4.7/10. Published 2025-08-06.
How severe is CVE-2025-48394?: Medium severity. CVSS v3 base score is 4.7 out of 10.
Is CVE-2025-48394 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.