CVE-2025-41426 Details
Description
Affected Vertiv products contain a stack based buffer overflow vulnerability. An attacker could exploit this vulnerability to gain code execution on the device.
A stack-based buffer overflow vulnerability has been identified in certain Vertiv Liebert products, specifically the RDU101 model in versions through 1.9.0.0 and the UNITY model in versions through 8.4.1.0. This vulnerability could be exploited by an attacker to execute arbitrary code on the affected device.
Users are advised to update Liebert RDU101 to version 1.9.1.2_0000001 and Liebert IS-UNITY to version 8.4.3.1_00160.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 21, 2025CISA-ADP
Assessed May 21, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-10 | [email protected] | AdvisoryBundleRemedy |
| https://www.vertiv.com/en-us/support/security-support-center/ | [email protected] | Vendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Vertiv Liebert RDU101 | <= 1.9.0.0 |
CPE
Remediation
| |
| Vertiv Liebert IS-UNITY | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 21, 2025 | New CVE Received | [email protected] |
Volerion