← Back

CVE-2026-22616

nvd nist
Published: Apr 16, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This security issue has been fixed in the latest version of Eaton IPP which is available on the Eaton download centre.

Affected (1)

Eaton
1 product
Intelligent Power Protector
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Intelligent Power Protector
Before 2.00

Related CWEs

CWE-307
Improper Restriction of Excessive Authentication Attempts
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (1)

Source: CybersecurityCOE@eaton.com
Vendor Advisory

Timeline

No history available yet.