Vertiv Liebert RDU101/UNITY Auth Bypass & Stack Buffer Overflow (CVE-2025-46412/46426)

Critical Vulnerability Information 1. Vulnerability Overview Release Date: May 20, 2025 Alert Code: ICSA-25-140-10 Related Topics: Industrial Control System Vulnerabilities, Industrial Control Systems 2. Executive Summary CVSS v3.1: 9.3 Note: Exploitable remotely / Low attack complexity Vendor: Vertiv Devices: Liebert RDU101 and Liebert UNITY Vulnerabilities: Authentication Bypass Using Alternate Path or Channel, Stack Buffer Overflow 3. Risk Assessment Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition or achieve remote code execution. 4. Technical Details 4.1 Affected Products Liebert RDU101: Versions 1.9.0.0 and earlier Liebert IS-UNITY: Versions 8.4.1.0 and earlier 4.2 Vulnerability Overview 4.2.1 Authentication Bypass Using Alternate Path or Channel (CVE-2025-46412) The affected Vertiv products fail to properly protect the web server functionality, allowing attackers to bypass authentication. CVSS v3.1 Base Score: 9.8 CVSS v4 Score: 9.3 4.2.2 Stack Buffer Overflow (CVE-2025-46426) The affected Vertiv products contain a stack buffer overflow vulnerability. Attackers can exploit this vulnerability to gain code execution privileges. CVSS v3.1 Base Score: 9.8 CVSS v4 Score: 9.3 5. Background Critical Infrastructure Sector: Communications, Energy Deployment Countries/Regions: Worldwide Company Headquarters Location: United States 6. Researchers Vera Mens of Clarity Teams2 reported these vulnerabilities to CISA. 7. Mitigations Vertiv recommends users take the following actions: Update Liebert RDU101 to v1.9.1.2_0000001 Update IS-UNITY to v8.4.3.1_00160 CISA recommends users implement defensive measures to minimize the risk of exploitation, such as: Minimizing network exposure of all control systems, ensuring they are not directly connected to the internet. Placing control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the latest versions. Also, recognize that VPNs are only as secure as the connected devices. 8. Update History May 20, 2025: Initial Release

Goal Reached Thanks to every supporter — we hit 100%!

Vertiv Liebert RDU101/UNITY Auth Bypass & Stack Buffer Overflow (CVE-2025-46412/46426)