eaton Vulnerability Advisory Catalog

Total 54 security vulnerabilities recorded for eaton software and firmware.

← Back to All Vendors
Component: intelligent_power_protector

Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an ...

๐Ÿ“… 2026-04-16
CVSS 7.8 Dossier →
Component: intelligent_power_protector

A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribut...

๐Ÿ“… 2026-04-16
CVSS 5.9 Dossier →
Component: intelligent_power_protector

Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a networkโ€‘based attacker to intercept the cookie and ...

๐Ÿ“… 2026-04-16
CVSS 5.7 Dossier →
Component: intelligent_power_protector

Eatonย Intelligent Power Protector (IPP)ย softwareย allows repeated authentication attempts against the web interface login page due to insufficient rate...

๐Ÿ“… 2026-04-16
CVSS 6.5 Dossier →
Component: intelligent_power_protector

Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and a...

๐Ÿ“… 2026-04-16
CVSS 6.0 Dossier →
Component: easysoft

The encryption mechanism used in Eaton's EasySoft project file wasย insecure and susceptible to brute force attacks, an attacker with access to this fi...

๐Ÿ“… 2026-03-10
CVSS 6.1 Dossier →
Component: ups_companion

Due to insecure library loading in the Eaton UPS Companion software executable,ย an attacker with access to the software package could perform arbitr...

๐Ÿ“… 2025-12-26
CVSS 7.8 Dossier →
Component: ups_companion

Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access...

๐Ÿ“… 2025-12-26
CVSS 6.7 Dossier →
Component: ups_companion

Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the ...

๐Ÿ“… 2025-12-26
CVSS 8.6 Dossier →
Component: xcomfort_ethernet_communication_interface

Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker with network access to the devi...

๐Ÿ“… 2025-12-23
CVSS 8.8 Dossier →
Component: foreseer_electrical_power_monitoring_system

The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reports, etc. S...

๐Ÿ“… 2024-09-13
CVSS 5.6 Dossier →
Component: foreseer_electrical_power_monitoring_system

The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user...

๐Ÿ“… 2024-09-13
CVSS 6.3 Dossier →
Component: foreseer_electrical_power_monitoring_system

The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages. However, the input fields for this feature in t...

๐Ÿ“… 2024-09-13
CVSS 6.7 Dossier →
Component: easysoft

Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent ...

๐Ÿ“… 2023-10-17
CVSS 5.9 Dossier →
Component: easy-box-e4-ac1_firmware

Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed ...

๐Ÿ“… 2023-10-17
CVSS 6.8 Dossier →
Component: smp_sg-4260_firmware

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automat...

๐Ÿ“… 2023-09-27
CVSS 4.7 Dossier →
Component: foreseer_electrical_power_monitoring_system

A security vulnerability was discovered in the Eaton Foreseer EPMS software. Foreseer EPMS connects an operationโ€™s vast array of devices to assist in ...

๐Ÿ“… 2022-10-28
CVSS 8.1 Dossier →
Component: intelligent_power_protector

Eaton Intelligent Power Protector (IPP) prior to version 1.69 is vulnerable to stored Cross Site Scripting. The vulnerability exists due to insufficie...

๐Ÿ“… 2022-04-19
CVSS 5.2 Dossier →
Component: intelligent_power_manager

Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injectio...

๐Ÿ“… 2022-04-18
CVSS 5.7 Dossier →
Component: intelligent_power_manager

Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site...

๐Ÿ“… 2022-04-18
CVSS 3.1 Dossier →
Component: intelligent_power_manager_infrastructure

Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Sc...

๐Ÿ“… 2022-04-18
CVSS 5.7 Dossier →
Component: intelligent_power_protector

The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the loc...

๐Ÿ“… 2022-04-01
CVSS 5.6 Dossier →
Component: intelligent_power_manager

The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issue affects: Intelligent Power M...

๐Ÿ“… 2022-04-01
CVSS 5.6 Dossier →
CVE-2021-23281 CRITICAL
Component: intelligent_power_manager

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not saniti...

๐Ÿ“… 2021-04-13
CVSS 10.0 Dossier →
Page 1 of 3 (54 Total Records)