Fiche vulnérabilité
CVE-2026-22617 : faille élevée eaton intelligent power protector (CVSS 7.4)
Description
Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.
En bref
- Sévérité
- Élevée (CVSS 7.4)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- Exploitation active
- Non signalée par la CISA
- Publication
- 16 avr. 2026
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- eaton intelligent power protector