Stack-Based Buffer Overflow in Vertiv Products
CVE-2025-41426

9.3CRITICAL

Key Information:

Vendor

Vertiv

Status
Liebert Rdu101
Liebert Is-unity
Vendor
CVE Published:
21 May 2025

What is CVE-2025-41426?

Vertiv devices are susceptible to a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the affected device. This issue poses a significant risk, as successful exploitation may allow unauthorized access and control over the device, potentially leading to data breaches or disruption of services. Organizations using Vertiv products should take immediate steps to apply available patches and enhance their security measures.

Affected Version(s)

Liebert IS-UNITY 0 <= 8.4.1.0

Liebert RDU101 0 <= 1.9.0.0

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-1...
https://www.vertiv.com/en-us/support/security-support-cen...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vera Mens of Claroty Team82 reported this these vulnerabilities to CISA.
JSON
.