What is CVE-2025-48397?

CVE-2025-48397 is a high-severity vulnerability in Eaton Brightlayer Software Suite (Blss), classified under Missing Authentication for Critical Function. CVSS score: 7.1/10. Published 2025-11-03.

How severe is CVE-2025-48397?

High severity. CVSS v3 base score is 7.1 out of 10.

Auth bypass in Eaton Brightlayer Software Suite (Blss)

CVE-2025-48397

The privileged user could log in without sufficient credentials after enabling an application protocol. This security issue has been fixed in the latest script patch latest version of of Eaton BLSS (7.3.0.SCP004).

Vulnerability class: Broken Authentication

EPSS: 0.002 (10.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Eaton Brightlayer Software Suite (Blss) — versions 0

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

CybersecurityCOE@eaton.com

Frequently asked questions

What is CVE-2025-48397?: CVE-2025-48397 is a high-severity vulnerability in Eaton Brightlayer Software Suite (Blss), classified under Missing Authentication for Critical Function. CVSS score: 7.1/10. Published 2025-11-03.
How severe is CVE-2025-48397?: High severity. CVSS v3 base score is 7.1 out of 10.