CVE-2025-59888 — MEDIUM (6.7)

Q: How severe is CVE-2025-59888?

CVE-2025-59888 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2025-59888?

Check the references section above for vendor advisories and patch information. Affected products include: Eaton Ups Companion.

Vulnerability Description

Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center.

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

HIGH

Affected Products

Vendor	Product	Versions
Eaton	Ups Companion	< 3.0

Related Weaknesses (CWE)

CWE-428

References

https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/secuPatchVendor Advisory

FAQ

What is CVE-2025-59888?

CVE-2025-59888 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system. This security issue has be...

How severe is CVE-2025-59888?

CVE-2025-59888 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-59888?

Check the references section above for vendor advisories and patch information. Affected products include: Eaton Ups Companion.