Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Inclusion locale de fichier dans Eaton Intelligent Power Manager v1.6 permet à un attaquant d'inclure un fichier, ce qui peut entraîner la divulgation d'informations sensibles, un déni de service et une exécution de code. CVE-2018-12031 Pour...

Eaton Intelligent Power Manager 1.6 - Directory Traversal

Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution. id: CVE-2018-12031 info: name: Eaton Intelligent Power Manager 1.6 - Directory Traversal author: daffainfo...

Eaton-UPS-Companion-Exploit

Vue d'ensemble Le logiciel Eaton UPS Companion vérifie chaque semaine la présence d'une mise à jour via une connexion HTTP non sécurisée et exécute eval sur le contenu de l'URL de mise à jour. Cela permet à un attaquant de créer une fonction JavaScript qui utilise les opérations bas niveau du...

CVE-2026-22620

Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device...

CVE-2026-22622

Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device...

CVE-2026-22622

Summary: CVE-2026-22622 affects Eaton’s Tripp Lite series PADM firmware. An authenticated user can exploit improper input validation in a session management interface to elevate privileges, potentially gaining unrestricted device access. The CVSSv3.1 base score is 8.8 (HIGH) with network attack v...

EUVD-2026-51077

Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device...

CVE-2026-22622

Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device...

CVE-2026-22621

Technical details about CVE-2026-22621 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

EUVD-2026-51076

Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary commands within a restricted environment...

CVE-2026-22621

Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary commands within a restricted environment...

CVE-2026-22621

Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary commands within a restricted environment...

CVE-2026-22621

Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary commands within a restricted environment...

EUVD-2026-51075

Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device...

CVE-2026-22620

The CVE-2026-22620 entry concerns Eaton’s Tripp Lite series PADM firmware, where the authentication component allows improper input validation. The issue enables an unauthenticated remote attacker to bypass authentication and gain privileged user access to the device. Details across connected rec...

CVE-2026-22620

Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device...

CVE-2026-22620

Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device...

CVE-2026-22621: Improper Neutralization of Special Elements used in an OS Command

Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary commands within a restricted environment...

CVE-2026-22620: Improper Neutralization of Special Elements used in an SQL Command

Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device...

CVE-2026-22622: Improper Neutralization of Special Elements used in an OS Command

Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device...