CVE-2025-59888 | BDVDB-2026-308016 Detail
EatonUPS Companion software
Description#
Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact high. Attack vector: local.
Weaknesses#
- CWE-428 Unquoted Search Path or Element
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.