Home

Description

Affected Vertiv products do not properly protect webserver functions that could allow an attacker to bypass authentication.

PUBLISHED Reserved 2025-05-14 | Published 2025-05-21 | Updated 2025-05-21 | Assigner icscert




CRITICAL: 9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CRITICAL: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-288 Authentication Bypass Using an Alternate Path or Channel

Product status

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Credits

Vera Mens of Claroty Team82 reported this these vulnerabilities to CISA. finder

References

www.cisa.gov/news-events/ics-advisories/icsa-25-140-10

www.vertiv.com/en-us/support/security-support-center/

cve.org (CVE-2025-46412)

nvd.nist.gov (CVE-2025-46412)

Download JSON