Medium ICSA-17-026-01 1 CVE

Eaton ePDU Path Traversal Vulnerability

Published Jan 26, 2017 · Updated Jan 26, 2017

Vendor: Eaton Product: EAMAxx Product: EAMxxx Product: EMAAxx Product: EMAxxx Product: ESWAxx

Summary

Independent researcher Maxim Rupp has identified a path traversal vulnerability in certain legacy Eaton ePDUs. Although the affected products are past end-of-life (EoL) and is no longer supported, Eaton has provided defense-in-depth mitigation instructions to protect devices that are still in use.

Vulnerabilities 1

Unscored —

CVE-2016-9357

An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life (EoL) and no longer…

Feb 13, 2017

Revision history

2017-01-26 #1
ICSA-17-026-01 Eaton ePDU Path Traversal Vulnerability

References

ICS Advisory ICSA-17-026-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-026-01