Eaton Eaton Brightlayer Software Suite (Blss)
2 CVEs affecting Eaton Eaton Brightlayer Software Suite (Blss). Latest disclosed: 2025-11-03. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-48396 | High | 8.3 | 2025-11-03 | Arbitrary code execution is possible due to improper validation of the file upload functionality in Eaton BLSS. This security issue has been fixed in the lates… |
CVE-2025-48397 | High | 7.1 | 2025-11-03 | The privileged user could log in without sufficient credentials after enabling an application protocol. This security issue has been fixed in the latest script… |