Authentication Bypass Vulnerability in Vertiv Products
CVE-2025-46412

9.3CRITICAL

Key Information:

Vendor

Vertiv

Status
Liebert Rdu101
Liebert Is-unity
Vendor
CVE Published:
21 May 2025

What is CVE-2025-46412?

Certain Vertiv products fail to adequately secure webserver functionalities, potentially allowing unauthorized users to bypass authentication mechanisms. This vulnerability could lead to unauthorized access and manipulation of sensitive data, posing significant security risks to the integrity of the affected systems. Users are encouraged to review security best practices and implement necessary updates as provided by Vertiv.

Affected Version(s)

Liebert IS-UNITY 0 <= 8.4.1.0

Liebert RDU101 0 <= 1.9.0.0

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-1...
https://www.vertiv.com/en-us/support/security-support-cen...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vera Mens of Claroty Team82 reported this these vulnerabilities to CISA.
JSON
.