Ups Companion Software
Approved changes feed: RSS · Atom
cpe:2.3:a:eaton:ups_companion_software:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Eaton (b7450635-db8f-5426-bd84-6f4be38222d9) |
|---|---|
| Product | Ups Companion Software (7b7c6b0e-e3ce-533e-bac4-ec1551008752) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-67450 |
vulnerable | 2026-06-08 07:41:19.840005 |
Details available
HIGH (7.8)
Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with access to the software package
could perform arbitrary code execution . This security issue has been fixed in the latest version of EUC which is available on the Eaton download center.
Published: 2025-12-26T06:59:41.375Z
Updated: 2025-12-26T14:55:51.712Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59888 |
vulnerable | 2026-06-08 07:35:23.371362 |
Details available
MEDIUM (6.7)
Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the
file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center.
Published: 2025-12-26T06:53:33.887Z
Updated: 2026-01-08T04:54:56.884Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6650 |
vulnerable | 2026-06-08 05:26:45.604078 |
Arbitrary code execution through “Update Manager” Class
HIGH (8.3)
UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software attempts to see if there are updates available. This results in arbitrary code execution on the machine where software is installed.
Published: 2020-03-23T13:25:43.903Z
Updated: 2024-09-16T20:07:28.680Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.