eaton Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/eaton/ Sun, 26 Feb 2023 09:11:43 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png eaton Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/eaton/ 32 32 CVE-2008-6816 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6816/ Sun, 26 Feb 2023 09:11:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6816/ Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.

The post CVE-2008-6816 appeared first on CVE Vulnerability.

]]> Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.

The post CVE-2008-6816 appeared first on CVE Vulnerability.

]]> CVE-2018-9279 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9279/ Sun, 26 Feb 2023 06:51:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9279/ An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the user’s password. The web page displayed by the appliance contains the password in cleartext. Passwords could be retrieved by browsing the source code of the webpage.

The post CVE-2018-9279 appeared first on CVE Vulnerability.

]]> An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the user’s password. The web page displayed by the appliance contains the password in cleartext. Passwords could be retrieved by browsing the source code of the webpage.

The post CVE-2018-9279 appeared first on CVE Vulnerability.

]]> CVE-2018-9280 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9280/ Sun, 26 Feb 2023 06:51:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9280/ An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user’s password. The web page displayed by the appliance contains the password in cleartext. Passwords of the read and write users could be retrieved by browsing the source code of the webpage.

The post CVE-2018-9280 appeared first on CVE Vulnerability.

]]> An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user’s password. The web page displayed by the appliance contains the password in cleartext. Passwords of the read and write users could be retrieved by browsing the source code of the webpage.

The post CVE-2018-9280 appeared first on CVE Vulnerability.

]]> CVE-2018-9281 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9281/ Sun, 26 Feb 2023 06:51:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9281/ An issue was discovered on Eaton UPS 9PX 8000 SP devices. The administration panel is vulnerable to a CSRF attack on the change-password functionality. This vulnerability could be used to force a logged-in administrator to perform a silent password update. The affected forms are also vulnerable to Reflected Cross-Site Scripting vulnerabilities. This flaw could be […]

The post CVE-2018-9281 appeared first on CVE Vulnerability.

]]> An issue was discovered on Eaton UPS 9PX 8000 SP devices. The administration panel is vulnerable to a CSRF attack on the change-password functionality. This vulnerability could be used to force a logged-in administrator to perform a silent password update. The affected forms are also vulnerable to Reflected Cross-Site Scripting vulnerabilities. This flaw could be triggered by driving an administrator logged into the Eaton application to a specially crafted web page. This attack could be done silently.

The post CVE-2018-9281 appeared first on CVE Vulnerability.

]]> CVE-2018-8847 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8847/ Sun, 26 Feb 2023 06:51:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8847/ Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution.

The post CVE-2018-8847 appeared first on CVE Vulnerability.

]]> Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution.

The post CVE-2018-8847 appeared first on CVE Vulnerability.

]]> CVE-2018-7511 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7511/ Sun, 26 Feb 2023 06:51:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7511/ In Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffer overflow which, in turn, may allow remote execution of arbitrary code.

The post CVE-2018-7511 appeared first on CVE Vulnerability.

]]> In Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffer overflow which, in turn, may allow remote execution of arbitrary code.

The post CVE-2018-7511 appeared first on CVE Vulnerability.

]]> CVE-2020-7915 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7915/ Sun, 26 Feb 2023 06:43:12 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7915/ An issue was discovered on Eaton 5P 850 devices. The Ubicacion SAI field allows XSS attacks by an administrator.

The post CVE-2020-7915 appeared first on CVE Vulnerability.

]]> An issue was discovered on Eaton 5P 850 devices. The Ubicacion SAI field allows XSS attacks by an administrator.

The post CVE-2020-7915 appeared first on CVE Vulnerability.

]]> CVE-2020-6654 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6654/ Sun, 26 Feb 2023 06:42:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6654/ A DLL Hijacking vulnerability in Eaton’s 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLLs when the software try to load vci11un6.DLL and cinpl.DLL.

The post CVE-2020-6654 appeared first on CVE Vulnerability.

]]> A DLL Hijacking vulnerability in Eaton’s 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLLs when the software try to load vci11un6.DLL and cinpl.DLL.

The post CVE-2020-6654 appeared first on CVE Vulnerability.

]]> CVE-2020-6655 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6655/ Sun, 26 Feb 2023 06:42:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6655/ The Eaton’s easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises due to improper validation and parsing of the E70 file content […]

The post CVE-2020-6655 appeared first on CVE Vulnerability.

]]> The Eaton’s easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises due to improper validation and parsing of the E70 file content by the application.

The post CVE-2020-6655 appeared first on CVE Vulnerability.

]]> CVE-2020-6656 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6656/ Sun, 26 Feb 2023 06:42:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6656/ Eaton’s easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability arises due to improper validation of user data supplied through E70 […]

The post CVE-2020-6656 appeared first on CVE Vulnerability.

]]> Eaton’s easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability arises due to improper validation of user data supplied through E70 file which is causing Type Confusion.

The post CVE-2020-6656 appeared first on CVE Vulnerability.

]]>