Arbitrary Code Execution Vulnerability in Eaton UPS Companion Software

CVE-2025-67450

What is CVE-2025-67450?

The Eaton UPS Companion software suffers from an arbitrary code execution vulnerability due to insecure library loading. This vulnerability allows an attacker who gains access to the software package to execute arbitrary code, which may compromise system integrity and availability. Eaton has addressed this issue in the latest version of the software, available for download from their site. Users are encouraged to update promptly to mitigate potential risks.

References