← Back

CVE-2026-22617

nvd nist
Published: Apr 16, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.4
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 2.2 / Impact: 5.2
Source: NVD

Description

Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.

Affected (1)

Eaton
1 product
Intelligent Power Protector
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Intelligent Power Protector
Before 2.00

Related CWEs

CWE-614
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session.

References (1)

Source: CybersecurityCOE@eaton.com
Vendor Advisory

Timeline

No history available yet.