Intelligent Power Protector vulnerabilities
5 known vulnerabilities in Intelligent Power Protector from Eaton. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.9 Critical severity
IPP software: Uncontrolled Search Path Element
Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the software package. This security issue has been fixed in the latest version of Eato
- 7.1 High severity
IPP software: Improperly Implemented Security Check for Standard
A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute, potentially exposing users to web‑based attacks. This security issue has been fixed in the latest version o
- 7.4 High severity
IPP Software: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eat
- 7.5 High severity
IPP Software: Improper Restriction of Excessive Authentication Attempts
Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This security issue has been fixed in the latest version of Eaton IPP which is available o
- 7.2 High severity
Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it…
Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and access to the local system to inject malicious code resulting in arbitrary command execution. This security iss