Vulnerabilities in Eaton
59 resultsCVE-2021-23279HIGHArbitrary File deleteEPSS 27.9%CVE-2021-23282MEDIUMStored Cross-site Scripting reported in Intelligent Power Manager v1EPSS 8.3%CVE-2020-6656MEDIUMFile parsing Type Confusion Remote code execution vulerabilityEPSS 2.8%CVE-2020-6655MEDIUMFile parsing Out-Of-Bounds read remote code executionEPSS 2.8%CVE-2021-23281CRITICALRemote Code executionEPSS 2.3%CVE-2020-6651HIGHCommand injection via specially crafted file name during config file uploadEPSS 2.1%CVE-2020-6650HIGHArbitrary code execution through “Update Manager” ClassEPSS 2.1%CVE-2018-7511—In Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffer overflow which, in EPSS 2.0%CVE-2021-23278HIGHArbitrary File deleteEPSS 1.1%CVE-2021-23277HIGHImproper Neutralization of Directives in Dynamically Evaluated CodeEPSS 1.0%CVE-2021-23280HIGHArbitrary File uploadEPSS 0.9%CVE-2021-23276HIGHImproper Neutralization of Special Elements used in an SQL CommandEPSS 0.8%CVE-2023-43775MEDIUMSecurity issue in SMP Gateway automation platformEPSS 0.8%CVE-2026-22620HIGHImproper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote aEPSS 0.7%CVE-2026-22621HIGHImproper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticatedEPSS 0.6%CVE-2026-22622HIGHImproper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticatedEPSS 0.5%CVE-2021-23283MEDIUMSecurity issues in Eaton Intelligent Power Protector (IPP)EPSS 0.5%CVE-2021-23284MEDIUMSecurity issues in Eaton Intelligent Power Manager InfrastructureEPSS 0.5%CVE-2021-23287MEDIUMSecurity issues in Intelligent Power Manager (IPM 1)EPSS 0.5%CVE-2025-22495HIGHAn improper input validation vulnerability was discovered in the NTP server configuration field of the Network-M2 card. This could result inEPSS 0.4%