Product by Eaton

Eaton Intelligent Power Protector

13 known vulnerabilities in Eaton Intelligent Power Protector (Eaton), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Eaton Intelligent Power Protector (Eaton)

Critical	CVE-2021-23279	Arbitrary File delete also in 3 other products	8.0	13.04.2021
Critical	CVE-2021-23278	Arbitrary File delete also in 3 other products	8.7	13.04.2021
Critical	CVE-2021-23277	Improper Neutralization of Directives in Dynamically Evaluated Code also in 3 other products	8.3	13.04.2021
Critical	CVE-2026-22619	Eaton IPP software: Uncontrolled Search Path Element also in 1 other product	9.9	16.04.2026
Critical	CVE-2021-23280	Arbitrary File upload also in 3 other products	8.0	13.04.2021
High	CVE-2021-23276	Improper Neutralization of Special Elements used in an SQL Command also in 3 other products	7.1	13.04.2021
High	CVE-2026-22616	Eaton IPP Software: Improper Restriction of Excessive Authentication Attempts also in 1 other product	7.5	16.04.2026
High	CVE-2026-22615	Eaton IPP Software: Improper Input Validation also in 1 other product	7.2	16.04.2026
High	CVE-2026-22617	Eaton IPP Software: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute also in 1 other product	7.4	16.04.2026
High	CVE-2026-22618	Eaton IPP software: Improperly Implemented Security Check for Standard also in 1 other product	7.1	16.04.2026
Medium	CVE-2021-23283	Security issues in Eaton Intelligent Power Protector (IPP)	5.2	19.04.2022
Medium	CVE-2022-33861	Insufficient verification of authenticity in IPP	5.1	25.11.2024
Medium	CVE-2021-23288	Security issues in Intelligent Power Protector	5.6	01.04.2022