İçeriğe atla
Noroxi

Eaton kayıtları

eaton üreticisine ait 56 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %1,8
Pre-auth RCE
6
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

56 kayıt
  • CVE-2018-16158
    60Bu hafta

    Eaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private key across different customers' installation

    KritikCVSS 9,8SilahlaştırılmışEPSS %34

    eaton · power xpert meter 4000 firmware30 Ağu 2018

  • CVE-2021-23279
    48Planlayın

    Arbitrary File delete

    KritikCVSS 10,0İstismar yokEPSS %27

    eaton · intelligent power manager13 Nis 2021

  • CVE-2018-12031
    45Planlayın

    Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory t

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    eaton · intelligent power manager7 Haz 2018

  • CVE-2018-8847
    41Planlayın

    Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %6

    eaton · 9000x firmware13 Tem 2018

  • CVE-2008-6816
    41Planlayın

    Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the

    KritikCVSS 10,0İstismar yokEPSS %4

    eaton · network shutdown module28 May 2009

  • CVE-2021-23281
    41Planlayın

    Remote Code execution

    KritikCVSS 10,0İstismar yokEPSS %2

    eaton · intelligent power manager13 Nis 2021

  • CVE-2021-23277
    40Planlayın

    Improper Neutralization of Directives in Dynamically Evaluated Code

    KritikCVSS 10,0İstismar yokEPSS %0

    eaton · intelligent power manager13 Nis 2021

  • CVE-2021-23280
    39İzleyin

    Arbitrary File upload

    KritikCVSS 9,9İstismar yokEPSS %0

    eaton · intelligent power manager13 Nis 2021

  • CVE-2022-33859
    39İzleyin

    Unrestricted file upload in Eaton Foreseer EPMS

    KritikCVSS 9,8İstismar yokEPSS %0

    eaton · foreseer electrical power monitoring system27 Eki 2022

  • CVE-2026-22619
    39İzleyin

    Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execut

    KritikCVSS 9,9İstismar yokEPSS %0

    eaton · intelligent power protector16 Nis 2026

  • CVE-2014-9196
    38İzleyin

    Eaton’s Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet

    KritikCVSS 9,3İstismar yokEPSS %2

    eaton · proview19 Tem 2015

  • CVE-2021-23278
    38İzleyin

    Arbitrary File delete

    KritikCVSS 9,6İstismar yokEPSS %1

    eaton · intelligent power manager13 Nis 2021

  • CVE-2020-6650
    36İzleyin

    Arbitrary code execution through “Update Manager” Class

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    eaton · ups companion23 Mar 2020

  • CVE-2021-23276
    35İzleyin

    Improper Neutralization of Special Elements used in an SQL Command

    YüksekCVSS 8,8İstismar yokEPSS %0

    eaton · intelligent power manager13 Nis 2021

  • CVE-2018-9281
    35İzleyin

    An issue was discovered on Eaton UPS 9PX 8000 SP devices.

    YüksekCVSS 8,8İstismar yokEPSS %0

    eaton · 9px ups firmware24 Eki 2018

  • CVE-2025-59886
    35İzleyin

    Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker with network access t

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    eaton · xcomfort ethernet communication interface23 Ara 2025

  • CVE-2025-59887
    34İzleyin

    Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker

    YüksekCVSS 8,6İstismar yokEPSS %0

    eaton · ups companion26 Ara 2025

  • CVE-2020-6656
    32İzleyin

    File parsing Type Confusion Remote code execution vulerability

    YüksekCVSS 7,8İstismar yokEPSS %2

    eaton · easysoft7 Oca 2021

  • CVE-2020-6655
    32İzleyin

    File parsing Out-Of-Bounds read remote code execution

    YüksekCVSS 7,8İstismar yokEPSS %2

    eaton · easysoft7 Oca 2021

  • CVE-2021-23286
    32İzleyin

    Security issues in Eaton Intelligent Power Manager Infrastructure

    YüksekCVSS 8,0İstismar yokEPSS %0

    eaton · intelligent power manager18 Nis 2022

  • CVE-2024-31415
    32İzleyin

    The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network manage

    YüksekCVSS 8,1İstismar yokEPSS %0

    eaton · foreseer electrical power monitoring system13 Eyl 2024

  • CVE-2020-10639
    31İzleyin

    Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues.

    YüksekCVSS 7,8İstismar yokEPSS %0

    eaton · hmisoft vu3 firmware15 Nis 2020

  • CVE-2020-6654
    31İzleyin

    A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbit

    YüksekCVSS 7,8İstismar yokEPSS %0

    eaton · 9000x programming and configuration software30 Eyl 2020

  • CVE-2020-6652
    31İzleyin

    Incorrect privilege assignment allowing non-admin users to upload config files

    YüksekCVSS 7,8İstismar yokEPSS %0

    eaton · intelligent power manager7 May 2020

  • CVE-2025-67450
    31İzleyin

    Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with access to the software package could perf

    YüksekCVSS 7,8İstismar yokEPSS %0

    eaton · ups companion26 Ara 2025