Vendor
Eaton
75 known vulnerabilities in products by Eaton, 0 of them actively exploited (CISA KEV).
Key figures
75
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-16158 | Eaton Power Xpert Meter 4000 Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2018-12031 | Eaton Intelligent Power Manager: Path Traversal | 9.8 | |
| Critical | CVE-2018-8847 | ICS-CERT Eaton 9000X Drive: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2021-23279 | Arbitrary File delete | 8.0 | |
| Medium | CVE-2021-23282 | Stored Cross-site Scripting reported in Intelligent Power Manager v1 | 5.2 | |
| Critical | CVE-2021-23281 | Remote Code execution | 10.0 | |
| High | CVE-2016-4512 | Eaton ELCSoft: Stack-Based Buffer Overflow | 7.3 | |
| High | CVE-2020-6651 | Command injection via specially crafted file name during config file upload | 8.8 | |
| High | CVE-2020-6650 | Arbitrary code execution through “Update Manager” Class | 8.3 | |
| High | CVE-2020-6656 | File parsing Type Confusion Remote code execution vulerability | 5.8 | |
| High | CVE-2020-6655 | File parsing Out-Of-Bounds read remote code execution | 5.8 | |
| High | CVE-2026-22620 | Eaton PADM: SQL Injection | 8.6 | |
| High | CVE-2026-22622 | Eaton PADM: OS Command Injection | 8.8 | |
| Medium | CVE-2016-4509 | Eaton ELCSoft: Heap-Based Buffer Overflow | 6.0 | |
| High | CVE-2026-22621 | Eaton PADM: OS Command Injection | 8.3 | |
| Medium | CVE-2018-7511 | Eaton ELCSoft: Improper Input Validation | 5.3 | |
| Medium | CVE-2016-9357 | Eaton ePDU EoL devices: Path Traversal | 5.3 | |
| High | CVE-2016-9368 | Eaton xComfort Ethernet Communication Interface: Improper Access Control | 7.5 | |
| Critical | CVE-2021-23278 | Arbitrary File delete | 8.7 | |
| Critical | CVE-2021-23277 | Improper Neutralization of Directives in Dynamically Evaluated Code | 8.3 | |
| Critical | CVE-2026-22619 | Eaton IPP software: Uncontrolled Search Path Element | 9.9 | |
| High | CVE-2026-41020 | Eaton easyE4: Authentication Bypass by Capture-replay | 7.5 | |
| High | CVE-2026-41021 | Eaton easyE4: Weak Password Requirements | 7.5 | |
| Critical | CVE-2021-23280 | Arbitrary File upload | 8.0 | |
| Not rated | CVE-2008-6816 | Eaton Network Shutdown Module: Code Execution | — |