Eaton g4 Pdu vulnerabilities

2 CVEs affecting Eaton g4 Pdu, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-48394, published 2025-08-06.

More from Eaton.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-48394, published 2025-08-06. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in…
• CVE-2025-48393, published 2025-08-06. Medium severity, CVSS 5.7. EPSS: 0.2% chance of exploitation in the next 30 days. The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security…