Eaton vulnerabilities, page 4
72 vulnerabilities
Known vulnerabilities in Eaton products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 76 products.
HighCVE-2026-22618eaton · intelligent_power_protector +1 moreeaton intelligent_power_protectorA security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute, potentially exposing users to web‑based attacks. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.EPSS0.23%CriticalCVE-2026-22619eaton · intelligent_power_protector +1 moreeaton intelligent_power_protectorEaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the software package. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download center.EPSS0.32%HighCVE-2026-22622eaton · padmeaton padmImproper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device.EPSS0.55%HighCVE-2026-22616eaton · intelligent_power_protector +1 moreeaton intelligent_power_protectorEaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This security issue has been fixed in the latest version of Eaton IPP which is available on the Eaton download centre.EPSS0.32%MediumCVE-2026-22614eaton · easysofteaton easysoftThe encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host
machine could potentially read the sensitive information stored and tamper with the project file. This security issue has been fixed in the latest version of Eaton EasySoft which is available on the Eaton download centre.EPSS0.08%HighCVE-2026-22620eaton · padmeaton padmImproper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device.EPSS0.66%HighCVE-2026-22615eaton · intelligent_power_protector +1 moreeaton intelligent_power_protectorDue to improper
input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is
possible for an attacker with admin privileges and access to the local system to
inject malicious code resulting in arbitrary command execution. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.EPSS0.34%MediumCVE-2026-22613eaton · network m3eaton network m3The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton
Network M3
which is available on the Eaton download center.EPSS0.18%HighCVE-2026-22617eaton · intelligent_power_protector +1 moreeaton intelligent_power_protectorEaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.EPSS0.17%MediumCVE-2023-43775eaton · smp_16_firmware +3 moreSecurity issue in SMP Gateway automation platformDenial-of-service vulnerability in the web server of the Eaton SMP Gateway allows
attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause
the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is
not vulnerable anymore.EPSS0.82%MediumCVE-2023-43777eaton · easysoftInsecure storage of password in easySoftEaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays. This software has a password protection functionality to secure the project file from unauthorized access. This password was being stored insecurely and could be retrieved by skilled adversaries.EPSS0.32%MediumCVE-2023-43776eaton · easy_e4-ac-8re1p_firmware +22 moreWeak encoding vulnerability in easyE4Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file ending).EPSS0.14%