Eaton Brightlayer Software Suite (Blss)
Approved changes feed: RSS · Atom
cpe:2.3:a:eaton:eaton_brightlayer_software_suite_(blss):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Eaton (b7450635-db8f-5426-bd84-6f4be38222d9) |
|---|---|
| Product | Eaton Brightlayer Software Suite (Blss) (3290412b-0011-5109-8ffe-351532c06287) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-48397 |
vulnerable | 2026-06-08 07:27:15.785575 |
Details available
HIGH (7.1)
The privileged user could log in without sufficient credentials after enabling an application protocol. This security issue has been fixed in the latest script patch latest version of of Eaton BLSS (7.3.0.SCP004).
Published: 2025-11-03T08:28:53.084Z
Updated: 2025-11-03T15:48:09.729Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48396 |
vulnerable | 2026-06-08 07:27:15.785269 |
Details available
HIGH (8.3)
Arbitrary code execution is possible due to improper validation of the file upload functionality in Eaton BLSS. This security issue has been fixed in the latest script patch latest version of of Eaton BLSS (7.3.0.SCP004).
Published: 2025-11-03T07:57:22.765Z
Updated: 2025-11-04T10:44:25.658Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.