Eaton vulnerabilities, page 3

72 vulnerabilities

Known vulnerabilities in Eaton products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 76 products.

4.8MediumCVE-2020-7915eaton · 5p_850_firmwareeaton 5p_850_firmwareAn issue was discovered on Eaton 5P 850 devices. The Ubicacion SAI field allows XSS attacks by an administrator.EPSS0.65%5.5MediumCVE-2020-10637eaton · hmisoft_vu3_firmwareeaton hmisoft_vu3_firmwareEaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could trigger an out-of-bounds read when loaded by the affected product.EPSS0.83%7.8HighCVE-2020-10639eaton · hmisoft_vu3_firmwareeaton hmisoft_vu3_firmwareEaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow when loaded by the affected product.EPSS0.80%8.8HighCVE-2020-6651eaton · intelligent_power_manager +1 moreCommand injection via specially crafted file name during config file uploadImproper Input Validation in Eaton's Intelligent Power Manager (IPM) v 1.67 & prior on file name during configuration file import functionality allows attackers to perform command injection or code execution via specially crafted file names while uploading the configuration file in the application.EPSS2.15%8.8HighCVE-2020-6650eaton · ups_companion +1 moreArbitrary code execution through “Update Manager” ClassUPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software attempts to see if there are updates available. This results in arbitrary code execution on the machine where software is installed.EPSS2.10%3.9LowCVE-2020-6653eaton · secure connect mobile app +1 moreSensitive date stored in logcat fileEaton's Secure connect mobile app v1.7.3 & prior stores the user login credentials in logcat file when user create or register the account on the Mobile app. A malicious app or unauthorized user can harvest the information and later on can use the information to monitor and control the user's account and associated devices.EPSS0.26%7.8HighCVE-2020-6654eaton · 9000x_programming_and_configuration_softwareDLL HijackingA DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLLs when the software try to load vci11un6.DLL and cinpl.DLL.EPSS0.41%7.8HighCVE-2020-6655eaton · easysoft +1 moreFile parsing Out-Of-Bounds read remote code executionThe Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises due to improper validation and parsing of the E70 file content by the application.EPSS2.77%7.8HighCVE-2020-6656eaton · easysoft +1 moreFile parsing Type Confusion Remote code execution vulerabilityEaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability arises due to improper validation of user data supplied through E70 file which is causing Type Confusion.EPSS2.82%7.8HighCVE-2020-6652eaton · intelligent_power_manager +1 moreIncorrect privilege assignment allowing non-admin users to upload config filesIncorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin users to upload the system configuration files by sending specially crafted requests. This can result in non-admin users manipulating the system configurations via uploading the configurations with incorrect parameters.EPSS0.36%9.3CriticalCVE-2014-9196eaton · proview +2 moreEaton’s Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with EthernetEaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.EPSS2.54%10CriticalCVE-2008-6816eaton · network_shutdown_moduleeaton network_shutdown_moduleEaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.EPSS4.46%5.1MediumCVE-2022-33861eaton · intelligent_power_protectorInsufficient verification of authenticity in IPPIPP software versions prior to v1.71 do not sufficiently verify the authenticity of data, in a way that causes it to accept invalid data.EPSS0.12%6.7MediumCVE-2022-33862eaton · intelligent power protector (ipp)Improper access control mechanism in IPPIPP software prior to v1.71 is vulnerable to default credential vulnerability. This could lead attackers to identify and access vulnerable systems.EPSS0.18%9.8CriticalCVE-2022-33859eaton · foreseer_electrical_power_monitoring_system +1 moreUnrestricted file upload in Eaton Foreseer EPMSA security vulnerability was discovered in the Eaton Foreseer EPMS software. Foreseer EPMS connects an operation’s vast array of devices to assist in the reduction of energy consumption and avoid unplanned downtime caused by the failures of critical systems. A threat actor may upload arbitrary files using the file upload feature. This vulnerability is present in versions 4.x, 5.x, 6.x & 7.0 to 7.5. A new version (v7.6) containing the remediation has been made available by Eaton and a mitigation has been provided for the affected versions that are currently supported. Customers are advised to update the software to the latest version (v7.6). Foreseer EPMS versions 4.x, 5.x, 6.x are no longer supported by Eaton. Please refer to the End-of-Support notification https://www.eaton.com/in/en-us/catalog/services/foreseer/foreseer-legacy.html .EPSS0.37%6.5MediumCVE-2024-31416eaton · foreseer +1 moreeaton foreseerThe Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reports, etc. Some of these input fields were not checking the length and bounds of the entered value. The exploit of this security flaw by a bad actor may result in excessive memory consumption or integer overflow.EPSS0.27%8.1HighCVE-2024-31415eaton · foreseer +1 moreeaton foreseerThe Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc. The software uses encryption to store these configurations securely on the host machine. However, the keys used for this encryption were insecurely stored, which could be abused to possibly change or remove the server configuration.EPSS0.12%6.7MediumCVE-2024-31414eaton · foreseer +1 moreeaton foreseerThe Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages. However, the input fields for this feature in the Eaton Foreseer software lacked proper input sanitization on the server-side, which could lead to injection and execution of malicious scripts when abused by bad actors.EPSS0.29%7.1HighCVE-2019-5625eaton · halo_homeEaton Halo Home Android App Insecure StorageThe Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file. This file persists until the user logs out of the application and reboots the device. This vulnerability can allow an attacker to impersonate the legitimate user by reusing the stored OAuth token, thus allowing them to view and change the user's personal information stored in the backend cloud service. The attacker would first need to gain physical control of the Android device or compromise it with a malicious app.EPSS0.41%8.3HighCVE-2026-22621eaton · padmeaton padmImproper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary commands within a restricted environment.EPSS0.58%