CVE-2025-46412 CRITICAL

CVE-2025-46412: Vertiv Liebert RDU101 and UNITY Authentication Bypass Using an Alternate Path or Channel

Vendor Vertiv
Product Liebert RDU101
Weakness CWE-288
Published May 21, 2025
Last update May 21, 2025
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Affected Vertiv products do not properly protect webserver functions that could allow an attacker to bypass authentication.

Key dates

02Disclosure timeline

May 21, 2025 CVE published
May 21, 2025 Record updated