CVE-2023-43775

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe...

CVE-2023-43775

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe...

Denial of service

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe...

Eaton SMP SG-4260 Security Vulnerability

The Eaton SMP SG-4260 is a gateway automation platform from Eaton Corporation USA. A security vulnerability exists in the Eaton SMP SG-4260 version that originates from the possibility that an attacker could accidentally reboot the automation platform by forcing the SMP gateway, affecting the...

CVE-2023-43775

CVE-2023-43775 affects Eaton SMP Gateway web server (SG-4260). The vulnerability can cause a Denial-of-Service leading to an unexpected restart of the automation platform; in rare cases, restarts may occur in Safe Mode or Max Safe Mode, after which the device is reportedly not vulnerable in Max S...

CVE-2023-43775 Security issue in SMP Gateway automation platform

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe...

PT-2023-28976 · Eaton · Eaton Smp Sg-4260 +1

Name of the Vulnerable Software and Affected Versions: Eaton SMP Gateway affected versions not specified Eaton SMP SG-4260 affected versions not specified Description: A denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows an attacker to potentially force an unexpecte...

Webpower UPS 5.53 Denial Of Service

Exploit Title: Webpower UPS v5.53 HTTP Denial of Service Date: 2023-03-09 Exploit Author: Yehia Elghaly Vendor Homepage: https://www.eaton.com/ae/en-gb.html Software Link: https://www.eaton.com/ae/en-gb.html Version: Revision v5.53 Tested on: WebPower UPS CVE: N/A !/usr/bin/env python Webpower UP...

Eaton Power Xpert Meter Use of Hard-coded Credentials (CVE-2018-16158)

Eaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins to uid 0 via the PubkeyAuthentication...

Eaton 9000X Drive Stack-Based Buffer Overflow (CVE-2018-8847)

Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Webpower UPS 5.53 Denial Of Service Exploit

Exploit Title: Webpower UPS v5.53 HTTP Denial of Service Exploit Author: Yehia Elghaly Vendor Homepage: https://www.eaton.com/ae/en-gb.html Software Link: https://www.eaton.com/ae/en-gb.html Version: Revision v5.53 Tested on: WebPower UPS CVE: N/A !/usr/bin/env python Webpower UPS v5.53 HTTP Deni...

Webpower UPS 5.53 Denial Of Service

Exploit Title: Webpower UPS v5.53 HTTP Denial of Service Date: 2023-03-09 Exploit Author: Yehia Elghaly Vendor Homepage: https://www.eaton.com/ae/en-gb.html Software Link: https://www.eaton.com/ae/en-gb.html Version: Revision v5.53 Tested on: WebPower UPS CVE: N/A !/usr/bin/env python Webpower UP...

CVE-2022-33859

A security vulnerability was discovered in the Eaton Foreseer EPMS software. Foreseer EPMS connects an operation’s vast array of devices to assist in the reduction of energy consumption and avoid unplanned downtime caused by the failures of critical systems. A threat actor may upload arbitrary...

Design/Logic Flaw

A security vulnerability was discovered in the Eaton Foreseer EPMS software. Foreseer EPMS connects an operation’s vast array of devices to assist in the reduction of energy consumption and avoid unplanned downtime caused by the failures of critical systems. A threat actor may upload arbitrary...

CVE-2022-33859 Unrestricted file upload in Eaton Foreseer EPMS

A security vulnerability was discovered in the Eaton Foreseer EPMS software. Foreseer EPMS connects an operation’s vast array of devices to assist in the reduction of energy consumption and avoid unplanned downtime caused by the failures of critical systems. A threat actor may upload arbitrary...

CVE-2022-33859 Unrestricted file upload in Eaton Foreseer EPMS

A security vulnerability was discovered in the Eaton Foreseer EPMS software. Foreseer EPMS connects an operation’s vast array of devices to assist in the reduction of energy consumption and avoid unplanned downtime caused by the failures of critical systems. A threat actor may upload arbitrary...

CVE-2022-33859

The CVE-2022-33859 entry describes an unrestricted file upload vulnerability in Eaton Foreseer EPMS. Affected versions include 4.x–7.5, with a remediation released as v7.6. The underlying issue is a file upload flaw in Foreseer EPMS that could allow a threat actor to upload arbitrary files. Eaton...

Eaton Foreseer EPMS 代码问题漏洞

Eaton Foreseer EPMS is a highly customizable web-based software platform from Eaton Corporation. A code issue vulnerability exists in Eaton Foreseer EPMS versions prior to v7.6, where a malicious attacker could upload arbitrary files using the file upload feature...

The vulnerability of the Eaton Intelligent Power Manager (IPM) software for monitoring and managing power supplies arises from the lack of protective measures for the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the Eaton Intelligent Power Manager IPM software for monitoring and managing power supplies is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a remote attacker to execute XSS attacks...

Eaton Intelligent Power Manager 跨站脚本漏洞

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. A cross-site scripting vulnerability exists in Eaton Intelligent Power Manager that stems from insufficient...