CVE-2026-22617

Summary

Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.

Affected Software

VendorProductVersion RangeStatus
EatonIPP Software0 < 2.0affected

Weaknesses

  • CWE-614: CWE-614 Sensitive cookie in HTTPS session without 'secure' attribute

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References