Login Request a demo
EA
Vendor
Eaton
67 products with CVEs on record
122
CVEs
0
On KEV
3
New 30D
Products
EA
easyE4
Eaton
7.5
2 CVEs0 on KEV2 new
EA
easySoft
Eaton
7.8
5 CVEs0 on KEV1 new
IP
Intelligent Power Manager
Eaton
10.0
12 CVEs0 on KEV0 new
IP
Intelligent Power Protector
Eaton
10.0
12 CVEs0 on KEV0 new
IP
Intelligent Power Manager Virtual Appliance
Eaton
10.0
5 CVEs0 on KEV0 new
IS
IPP software
Eaton
9.9
5 CVEs0 on KEV0 new
FE
Foreseer Electrical Power Monitoring System
Eaton
9.8
4 CVEs0 on KEV0 new
UC
Ups Companion
Eaton
8.8
4 CVEs0 on KEV0 new
9U
9px Ups Firmware
Eaton
8.8
3 CVEs0 on KEV0 new
EL
Elcsoft
Eaton
7.3
3 CVEs0 on KEV0 new
FR
Foreseer Reporting Software (FRS)
Eaton
6.7
3 CVEs0 on KEV0 new
PA
PADM
Eaton
8.8
3 CVEs0 on KEV0 new
EB
Eaton Brightlayer Software Suite (BLSS)
Eaton
8.3
2 CVEs0 on KEV0 new
GP
G4 PDU
Eaton
5.7
2 CVEs0 on KEV0 new
HV
Hmisoft Vu3 Firmware
Eaton
7.8
2 CVEs0 on KEV0 new
PR
Proview
Eaton
5.3
2 CVEs0 on KEV0 new
UC
UPS Companion software
Eaton
7.8
2 CVEs0 on KEV0 new
XE
Xcomfort Ethernet Communication Interface
Eaton
8.8
2 CVEs0 on KEV0 new
58
5p 850 Firmware
Eaton
4.8
1 CVEs0 on KEV0 new
9F
9000x Firmware
Eaton
9.8
1 CVEs0 on KEV0 new
9P
9000x Programming And Configuration Software
Eaton
7.8
1 CVEs0 on KEV0 new
ES
Eamaxx Series Epdu Firmware
Eaton
5.3
1 CVEs0 on KEV0 new
ES
Eamxxx Series Epdu Firmware
Eaton
5.3
1 CVEs0 on KEV0 new
EF
Easy-box-e4-ac1 Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-box-e4-dc1 Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-box-e4-uc1 Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-ac-12rc1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-ac-12rcx1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-ac-16re1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EE
Easy E4-ac-8re1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-dc-12tc1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-dc-12tcx1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-dc-16te1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-dc-4pe1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-dc-6ae1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-dc-8te1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-uc-12rc1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-uc-12rcx1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-uc-16re1 Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-uc-16re1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EF
Easy-e4-uc-8re1p Firmware
Eaton
6.6
1 CVEs0 on KEV0 new
EG
Eaton Galileo Software
Eaton
7.3
1 CVEs0 on KEV0 new
EI
Eaton IPP software
Eaton
8.6
1 CVEs0 on KEV0 new
EU
Eaton UPS Companion Software
Eaton
8.6
1 CVEs0 on KEV0 new
EX
Eaton xComfort ECI
Eaton
8.8
1 CVEs0 on KEV0 new
ES
Emaaxx Series Epdu Firmware
Eaton
5.3
1 CVEs0 on KEV0 new
ES
Emaxxx Series Epdu Firmware
Eaton
5.3
1 CVEs0 on KEV0 new
ES
Eswaxx Series Epdu Firmware
Eaton
5.3
1 CVEs0 on KEV0 new
FE
Foreseer EPMS
Eaton
9.8
1 CVEs0 on KEV0 new
HH
Halo Home
Eaton
7.1
1 CVEs0 on KEV0 new
IP
Intelligent Power Manager Infrastructure
Eaton
4.8
1 CVEs0 on KEV0 new
NM
Network M2
Eaton
8.4
1 CVEs0 on KEV0 new
NM
Network M3
Eaton
5.7
1 CVEs0 on KEV0 new
NS
Network Shutdown Module
Eaton
–
1 CVEs0 on KEV0 new
NG
NMC G2
Eaton
4.7
1 CVEs0 on KEV0 new
PX
Power Xpert Meter 4000 Firmware
Eaton
9.8
1 CVEs0 on KEV0 new
PX
Power Xpert Meter 6000 Firmware
Eaton
9.8
1 CVEs0 on KEV0 new
PX
Power Xpert Meter 8000 Firmware
Eaton
9.8
1 CVEs0 on KEV0 new
SE
Secureconnect
Eaton
3.9
1 CVEs0 on KEV0 new
S1
Smp 16 Firmware
Eaton
5.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-41022
New
EA
easySoft
Eaton
5.9–Oct 27Eaton easySoft improperly validates TLS certificates presented by easyE4 devices
CVE-2026-41021
New
EA
easyE4
Eaton
7.5–Oct 27Eaton easyE4 uses an insufficiently strong password policy
CVE-2026-41020
New
EA
easyE4
Eaton
7.5–Oct 27Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid…
CVE-2026-22622
PA
PADM
Eaton
8.8
1%
Jul 30Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting…
CVE-2026-22621
PA
PADM
Eaton
8.3
1%
Jul 30Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary…
CVE-2026-22620
PA
PADM
Eaton
8.6
1%
Jul 30Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and…
CVE-2026-22619
IS
IPP software
Eaton
9.9
0%
Apr 16Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the…
CVE-2026-22618
IS
IPP software
Eaton
7.1
0%
Apr 16A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute, potentially exposing users…
CVE-2026-22617
IS
IPP Software
Eaton
7.4
0%
Apr 16Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a…
CVE-2026-22616
IS
IPP Software
Eaton
7.5
0%
Apr 16Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This…
CVE-2026-22615
IS
IPP Software
Eaton
7.2
0%
Apr 16Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and access to the local system to…
CVE-2026-22614
EA
EasySoft
Eaton
6.1
0%
Mar 10The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine…
CVE-2026-22613
NM
Network M3
Eaton
5.7
0%
Feb 9The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle…
CVE-2025-67450
UC
UPS Companion software
Eaton
7.8
0%
Dec 26Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with access to the software package could perform arbitrary code execution . This…
CVE-2025-59888
UC
UPS Companion software
Eaton
6.7
0%
Dec 26Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system
CVE-2025-59887
EU
Eaton UPS Companion Software
Eaton
8.6
0%
Dec 26Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the software…
CVE-2025-59886
EX
Eaton xComfort ECI
Eaton
8.8
0%
Dec 23Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker with network access to the device executing privileged user…
CVE-2025-59890
EG
Eaton Galileo Software
Eaton
7.3
0%
Nov 27Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead into an attacker with local access…
CVE-2025-48397
EB
Eaton Brightlayer Software Suite (BLSS)
Eaton
7.1
0%
Nov 3The privileged user could log in without sufficient credentials after enabling an application protocol. This security issue has been fixed in the latest script patch latest…
CVE-2025-48396
EB
Eaton Brightlayer Software Suite (BLSS)
Eaton
8.3
0%
Nov 3Arbitrary code execution is possible due to improper validation of the file upload functionality in Eaton BLSS
CVE-2025-59889
EI
Eaton IPP software
Eaton
8.6
0%
Oct 14Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the software package.  This…
CVE-2025-48395
NG
NMC G2
Eaton
4.7
0%
Sep 5An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI
CVE-2025-48394
GP
G4 PDU
Eaton
4.7
0%
Aug 6An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI
CVE-2025-48393
GP
G4 PDU
Eaton
5.7
0%
Aug 6The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle…
CVE-2025-22493
FR
Foreseer Reporting Software (FRS)
Eaton
5.6
0%
Mar 5Improper cookie attributes in Foreseer Reporting Software (FRS)
CVE-2025-22492
FR
Foreseer Reporting Software (FRS)
Eaton
6.3
0%
Feb 28Insecure storage of connection strings in FRS
CVE-2025-22491
FR
Foreseer Reporting Software (FRS)
Eaton
6.7
0%
Feb 28Improper Input Validation in Foreseer Reporting Software (FRS)
CVE-2025-22495
NM
Network M2
Eaton
8.4
0%
Feb 24An improper input validation vulnerability was discovered in the NTP server configuration field of the Network-M2 card
CVE-2024-31416
FE
Foreseer Electrical Power Monitoring System
Eaton
6.5
0%
Sep 13The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reports, etc
CVE-2024-31415
FE
Foreseer Electrical Power Monitoring System
Eaton
8.1
0%
Sep 13The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc
CVE-2024-31414
FE
Foreseer Electrical Power Monitoring System
Eaton
6.1
0%
Sep 13The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages
CVE-2023-43777
EA
Easysoft
Eaton
6.5
0%
Oct 17Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays
CVE-2023-43776
EF
Easy-e4-uc-16re1 Firmware
Eaton
6.6
0%
Oct 17Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access
CVE-2023-43775
SS
Smp Sg-4250 Firmware
Eaton
5.3
1%
Sep 27Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the…
CVE-2022-33859
FE
Foreseer EPMS
Eaton
9.8
0%
Oct 28Unrestricted file upload in Eaton Foreseer EPMS
CVE-2021-23283
IP
Intelligent Power Protector
Eaton
5.4
1%
Apr 19Eaton Intelligent Power Protector (IPP) prior to version 1.69 is vulnerable to stored Cross Site Scripting
CVE-2021-23286
IP
Intelligent Power Manager
Eaton
8.0
0%
Apr 18Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection
CVE-2021-23285
IP
Intelligent Power Manager
Eaton
4.8
0%
Apr 18Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability
CVE-2021-23284
IP
Intelligent Power Manager Infrastructure
Eaton
4.8
1%
Apr 18Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability
CVE-2021-23288
IP
Intelligent Power Protector
Eaton
4.8
0%
Apr 1The vulnerability exists due to insufficient validation of input from certain resources by the IPP software
CVE-2021-23287
IP
Intelligent Power Manager
Eaton
5.4
0%
Apr 1The vulnerability exists due to insufficient validation of input of certain resources within the IPM software
CVE-2021-23281
IP
Intelligent Power Manager
Eaton
10.0
2%
Apr 13Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability
CVE-2021-23280
IP
Intelligent Power Manager
Eaton
9.9
1%
Apr 13Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability
CVE-2021-23279
IP
Intelligent Power Manager
Eaton
10.0
27%
Apr 13Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in…
CVE-2021-23278
IP
Intelligent Power Manager
Eaton
9.6
1%
Apr 13Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at…
CVE-2021-23277
IP
Intelligent Power Manager
Eaton
10.0
1%
Apr 13Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability
CVE-2021-23276
IP
Intelligent Power Manager Virtual Appliance
Eaton
8.8
1%
Apr 13Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection
CVE-2020-6656
EA
Easysoft
Eaton
7.8
3%
Jan 7Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability
CVE-2020-6655
EA
Easysoft
Eaton
7.8
3%
Jan 7The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability
CVE-2020-6654
9P
9000x Programming And Configuration Software
Eaton
7.8
0%
Sep 30A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required…
CVE-2020-6653
SE
Secureconnect
Eaton
3.9
0%
Aug 12Eaton's Secure connect mobile app v1.7.3 & prior stores the user login credentials in logcat file when user create or register the account on the Mobile app
CVE-2020-6652
IP
Intelligent Power Manager
Eaton
7.8
0%
May 7Incorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin users to upload the system configuration files by sending…
CVE-2020-6651
IP
Intelligent Power Manager
Eaton
7.3
2%
May 7Improper Input Validation in Eaton's Intelligent Power Manager (IPM) v 1.67 & prior on file name during configuration file import functionality allows attackers to perform command…
CVE-2020-10639
HV
Hmisoft Vu3 Firmware
Eaton
7.8
1%
Apr 15Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues
CVE-2020-10637
HV
Hmisoft Vu3 Firmware
Eaton
5.5
1%
Apr 15Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues
CVE-2020-6650
UC
Ups Companion
Eaton
8.8
2%
Mar 23UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability
CVE-2020-7915
58
5p 850 Firmware
Eaton
4.8
1%
Jan 22An issue was discovered on Eaton 5P 850 devices
CVE-2019-5625
HH
Halo Home
Eaton
7.1
0%
May 22The Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file
CVE-2018-9281
9U
9px Ups Firmware
Eaton
8.8
0%
Oct 24An issue was discovered on Eaton UPS 9PX 8000 SP devices
CVE-2018-9280
9U
9px Ups Firmware
Eaton
4.9
1%
Oct 24An issue was discovered on Eaton UPS 9PX 8000 SP devices