Eaton vulnerabilities

Products

• Intelligent Power Protector 14
• Intelligent Power Manager 12
• Intelligent Power Manager (ipm) 9
• Easysoft 5
• Intelligent Power Manager Virtual Appliance 5
• Ipp Software 5
• Foreseer Electrical Power Monitoring System 4
• Ups Companion 4
• 9px Ups Firmware 3
• Easye4 3
• Elcsoft 3
• Foreseer 3
• Foreseer Reporting Software (frs) 3
• Intelligent Power Manager Infrastructure (ipm Infrastructure) 3
• Padm 3
• Ups Companion Software 3
• Easysoft Software 2
• Brightlayer Software Suite (blss) 2
• G4 Pdu 2
• Hmisoft Vu3 Firmware 2
• Intelligent Power Protector 2
• Proview 2
• Xcomfort Ethernet Communication Interface 2

Newest

• eaton easysoft Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network... CVE-2026-41022 5.9 MediumOctober 27, 2026
• eaton easye4 Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password... CVE-2026-41021 7.5 HighOctober 27, 2026
• eaton easye4 Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated... CVE-2026-41020 7.5 HighOctober 27, 2026
• eaton padm Improper input validation in one of the session management interface of Eaton's Tripp Lite series... CVE-2026-22622 8.8 HighJuly 30, 2026
• eaton padm Improper input validation in one of the session management interface of Eaton's Tripp Lite Series... CVE-2026-22621 8.3 HighJuly 30, 2026
• eaton padm Improper input validation in the authentication component of Eaton's Tripp Lite series PADM... CVE-2026-22620 8.6 HighJuly 30, 2026
• eaton intelligent power protector, ipp software +1 more Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable... CVE-2026-22619 7.8 HighApril 16, 2026
• eaton intelligent power protector, ipp software +1 more A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an... CVE-2026-22618 5.9 MediumApril 16, 2026
• eaton intelligent power protector, ipp software +1 more Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow... CVE-2026-22617 5.7 MediumApril 16, 2026
• eaton intelligent power protector, ipp software +1 more Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against... CVE-2026-22616 6.5 MediumApril 16, 2026
• eaton intelligent power protector, ipp software +1 more Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is... CVE-2026-22615 6.0 MediumApril 16, 2026
• eaton easysoft The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to... CVE-2026-22614 6.1 MediumMarch 10, 2026
• eaton network m3 The server identity check mechanism for firmware upgrade performed via command shell is... CVE-2026-22613 5.7 MediumFebruary 9, 2026
• eaton ups companion software, ups companion +1 more Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with... CVE-2025-67450 7.8 HighDecember 26, 2025
• eaton ups companion software, ups companion +1 more Improper quotation in search paths in the Eaton UPS Companion software installer could lead to... CVE-2025-59888 6.7 MediumDecember 26, 2025
• eaton ups companion software, ups companion +1 more Improper authentication of library files in the Eaton UPS Companion software installer could lead... CVE-2025-59887 8.6 HighDecember 26, 2025
• eaton xcomfort eci, xcomfort ethernet communication interface +1 more Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could... CVE-2025-59886 Public exploit 8.8 HighDecember 23, 2025
• eaton galileo software Improper input sanitization in the file archives upload functionality of Eaton Galileo software... CVE-2025-59890 7.3 HighNovember 27, 2025
• eaton brightlayer software suite (blss) The privileged user could log in without sufficient credentials after enabling an application... CVE-2025-48397 7.1 HighNovember 3, 2025
• eaton brightlayer software suite (blss) Arbitrary code execution is possible due to improper validation of the file upload functionality... CVE-2025-48396 8.3 HighNovember 3, 2025
• eaton ipp software Improper authentication of library files in the Eaton IPP software installer could lead to... CVE-2025-59889 8.6 HighOctober 14, 2025
• eaton nmc g2 An attacker with authenticated and privileged access could modify the contents of a non-sensitive... CVE-2025-48395 4.7 MediumSeptember 5, 2025
• eaton g4 pdu An attacker with authenticated and privileged access could modify the contents of a non-sensitive... CVE-2025-48394 4.7 MediumAugust 6, 2025
• eaton g4 pdu The server identity check mechanism for firmware upgrade performed via command shell is... CVE-2025-48393 5.7 MediumAugust 6, 2025
• eaton foreseer reporting software (frs) Improper cookie attributes in Foreseer Reporting Software (FRS) CVE-2025-22493 5.6 MediumMarch 5, 2025
• eaton foreseer reporting software (frs) Insecure storage of connection strings in FRS CVE-2025-22492 6.3 MediumFebruary 28, 2025
• eaton foreseer reporting software (frs) Improper Input Validation in Foreseer Reporting Software (FRS) CVE-2025-22491 6.7 MediumFebruary 28, 2025
• eaton network m2 An improper input validation vulnerability was discovered in the NTP server configuration field... CVE-2025-22495 8.4 HighFebruary 24, 2025
• eaton intelligent power protector (ipp), intelligent power protector +1 more Improper access control mechanism in IPP CVE-2022-33862 6.7 MediumNovember 25, 2024
• eaton intelligent power protector Insufficient verification of authenticity in IPP CVE-2022-33861 5.1 MediumNovember 25, 2024
• eaton intelligent power manager (ipm) Stored Cross-site Scripting reported in Intelligent Power Manager v1 CVE-2021-23282 5.2 MediumNovember 25, 2024
• eaton foreseer, foreseer electrical power monitoring system +1 more The Eaton Foreseer software provides multiple customizable input fields for the users to... CVE-2024-31416 5.6 MediumSeptember 13, 2024
• eaton foreseer, foreseer electrical power monitoring system +1 more The Eaton Foreseer software provides the feasibility for the user to configure external servers... CVE-2024-31415 6.3 MediumSeptember 13, 2024
• eaton foreseer, foreseer electrical power monitoring system +1 more The Eaton Foreseer software provides users the capability to customize the dashboard in WebView... CVE-2024-31414 6.7 MediumSeptember 13, 2024
• eaton easysoft Insecure storage of password in easySoft CVE-2023-43777 5.9 MediumOctober 17, 2023
• eaton easye4, easy-box-e4-ac1 firmware, easy-box-e4-dc1 firmware +20 more +22 more Weak encoding vulnerability in easyE4 CVE-2023-43776 6.8 MediumOctober 17, 2023
• eaton smp 16, smp 4/dp, smp sg-4250 +5 more +7 more Security issue in SMP Gateway automation platform CVE-2023-43775 4.7 MediumSeptember 26, 2023
• eaton foreseer epms, foreseer electrical power monitoring system +1 more Unrestricted file upload in Eaton Foreseer EPMS CVE-2022-33859 8.1 HighOctober 28, 2022
• eaton intelligent power protector (ipp), intelligent power protector +1 more Security issues in Eaton Intelligent Power Protector (IPP) CVE-2021-23283 5.2 MediumApril 19, 2022
• eaton intelligent power manager infrastructure (ipm infrastructure), intelligent power manager +1 more Security issues in Eaton Intelligent Power Manager Infrastructure CVE-2021-23286 5.7 MediumApril 18, 2022
• eaton intelligent power manager infrastructure (ipm infrastructure), intelligent power manager infrastructure +1 more Security issues in Eaton Intelligent Power Manager Infrastructure CVE-2021-23284 5.7 MediumApril 18, 2022
• eaton intelligent power manager infrastructure (ipm infrastructure), intelligent power manager +1 more Security issues in Eaton Intelligent Power Manager Infrastructure CVE-2021-23285 3.1 LowApril 18, 2022
• eaton intelligent power protector Security issues in Intelligent Power Protector CVE-2021-23288 5.6 MediumApril 1, 2022
• eaton intelligent power manager (ipm 1), intelligent power manager +1 more Security issues in Intelligent Power Manager (IPM 1) CVE-2021-23287 5.6 MediumApril 1, 2022
• eaton intelligent power manager (ipm), intelligent power manager, intelligent power manager virtual appliance +1 more +3 more Arbitrary File upload CVE-2021-23280 8.0 HighApril 13, 2021
• eaton intelligent power manager (ipm), intelligent power manager, intelligent power manager virtual appliance +1 more +3 more Improper Neutralization of Directives in Dynamically Evaluated Code CVE-2021-23277 8.3 HighApril 13, 2021
• eaton intelligent power manager (ipm), intelligent power manager +1 more Remote Code execution CVE-2021-23281 10.0 CriticalApril 13, 2021
• eaton intelligent power manager (ipm), intelligent power manager, intelligent power manager virtual appliance +1 more +3 more Arbitrary File delete CVE-2021-23279 EPSS 27.9% 8.0 HighApril 13, 2021
• eaton intelligent power manager (ipm), intelligent power manager, intelligent power manager virtual appliance +1 more +3 more Improper Neutralization of Special Elements used in an SQL Command CVE-2021-23276 7.1 HighApril 13, 2021
• eaton intelligent power manager (ipm), intelligent power manager, intelligent power manager virtual appliance +1 more +3 more Arbitrary File delete CVE-2021-23278 8.7 HighApril 13, 2021
• Show olderLoading…