682 matches found
Eaton xComfort Ethernet Communication Interface (ECI) Information Disclosure Vulnerability
The xComfort Ethernet Communication Interface ECI is a building automation system. An information disclosure vulnerability exists in Eaton xComfort Ethernet Communication Interface ECI versions 1.07 and earlier, which can be exploited by remote attackers to access backup files and system logs...
ICSA-17-061-01_Eaton xComfort Ethernet Communication Interface
CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Eaton Equipment: xComfort Ethernet Communication Interface Vulnerability: Improper Access Control AFFECTED PRODUCTS The following versions of xComfort Ethernet Communication Interface ECI, a building automation system...
Multiple Eaton ePDUs Path Traversal Vulnerabilities
Eaton ePDUs EAMxxx is a rack-mounted power distribution unit module from Eaton Corporation of America. A path traversal vulnerability exists in multiple Eaton ePDUs products, allowing remote attackers to exploit the vulnerability by submitting a special URL to access configuration files...
CVE-2016-9357
An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life EoL and no longer supported: EAMxxx prior to June 30, 2015, EMAxxx prior to January 31, 2014, EAMAxx prior to January 31, 2014, EMAAxx prior to January 31, 2014, and ESWAxx prior to January 31, 201...
CVE-2016-9357
An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life EoL and no longer supported: EAMxxx prior to June 30, 2015, EMAxxx prior to January 31, 2014, EAMAxx prior to January 31, 2014, EMAAxx prior to January 31, 2014, and ESWAxx prior to January 31, 201...
Path traversal
An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life EoL and no longer supported: EAMxxx prior to June 30, 2015, EMAxxx prior to January 31, 2014, EAMAxx prior to January 31, 2014, EMAAxx prior to January 31, 2014, and ESWAxx prior to January 31, 201...
CVE-2016-9357
The CVE-2016-9357 issue affects legacy Eaton ePDUs (EAMxxx, EMAxxx, EAMAxx, EMAAxx, ESWAxx) that are past end-of-life and no longer supported. A path traversal vulnerability allows an unauthenticated attacker to access configuration files via a specially crafted URL. Documents note remote exploit...
CVE-2016-9357
An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life EoL and no longer supported: EAMxxx prior to June 30, 2015, EMAxxx prior to January 31, 2014, EAMAxx prior to January 31, 2014, EMAAxx prior to January 31, 2014, and ESWAxx prior to January 31, 201...
CVE-2016-9357: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life EoL and no longer supported: EAMxxx prior to June 30, 2015, EMAxxx prior to January 31, 2014, EAMAxx prior to January 31, 2014, EMAAxx prior to January 31, 2014, and ESWAxx prior to January 31, 201...
PT-2017-10084
Name of the Vulnerable Software and Affected Versions Eaton ePDUs EAMxxx versions prior to June 30, 2015 Eaton ePDUs EMAxxx versions prior to January 31, 2014 Eaton ePDUs EAMAxx versions prior to January 31, 2014 Eaton ePDUs EMAAxx versions prior to January 31, 2014 Eaton ePDUs ESWAxx versions...
Eaton ePDU Path Traversal Vulnerability
OVERVIEW Independent researcher Maxim Rupp has identified a path traversal vulnerability in certain legacy Eaton ePDUs. Although the affected products are past end-of-life EoL and is no longer supported, Eaton has provided defense-in-depth mitigation instructions to protect devices that are still...
Eaton Lighting Systems EG2 Web Control Authentication Bypass Vulnerabilities
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on March 1, 2016, and is being released to the NCCIC/ICS-CERT web site. Independent researcher Maxim Rupp has identified vulnerabilities in Eaton Lighting Systems’ EG2 Web Control application. Eaton Lighting Systems...
eaton-jobs.com XSS vulnerability
Vulnerable URL: http://www.eaton-jobs.com/ListJobs/All/Search/jobtitle/test%22%20onmouseover=alert'OPENBUGBOUNTY';%22/all/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 131774 VIP...
Eaton ELCSoft Heap Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Eaton ELCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of EPC...
CVE-2016-4512
Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote attackers to execute arbitrary code via a long packet...
CVE-2016-4512
Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote attackers to execute arbitrary code via a long packet...
CVE-2016-4509
Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file...
CVE-2016-4509
Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file...