Read the docs

Eaton

Records75All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high31CVSS 7.0–8.9

Exploited now

Eaton records in CISA KEV

No Eaton vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Intelligent Power Manager 12 records HIGH Intelligent Power Protector 12 records HIGH Intelligent Power Manager Virtual Appliance 5 records HIGH Easysoft 4 records LOW Foreseer Electrical Power Monitoring System 4 records MEDIUM Ups Companion 4 records MEDIUM 9px Ups Firmware 3 records LOW Elcsoft 3 records LOW

Records

4 records in Easysoft · all components

TI-2020-05475 CVE-2020-6656 · GHSA-3vf9-hrcp-mj3p

File parsing Type Confusion Remote code execution vulerability

Priority LOW 39

Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02823 Published 2021-01-07 Fixed in v7.22 CWE-20
TI-2020-05474 CVE-2020-6655 · GHSA-98x2-8rq4-gpx2

File parsing Out-Of-Bounds read remote code execution

Priority LOW 39

The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02769 Published 2021-01-07 Fixed in v7.22 CWE-125
TI-2023-23472 CVE-2023-43777 · GHSA-m6cj-mh5r-8m7w

Insecure storage of password in easySoft

Priority LOW 29

Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00321 Published 2023-10-17 Fixed in 8.01 CWE-256
TI-2026-18175 CVE-2026-22614 · GHSA-wgwf-qr6f-pj7f

The encryption mechanism used in Eaton's EasySoft project file was insecure and…

Priority LOW 26

The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine could potentially read the sensitive inf…

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.0009 Published 2026-03-10 Fixed in 8.4 CWE-257
Open these records in search →