CVE-2025-59886

eaton xcomfort ethernet communication interface

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2025-59886

Katalog CVE

CVSS 8.8 · High EPSS 0,32%

Kerentanan Improper Input Validation pada eaton xcomfort ethernet communication interface. Skor CVSS 3.1 8.8 (High) menurut eaton.com.

Deskripsi (NVD)

Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker with network access to the device executing privileged user commands. As cybersecurity standards continue to evolve and to meet our requirements today, Eaton has decided to discontinue the product. Upon retirement or end of support, there will be no new security updates, non-security updates, or paid assisted support options, or online technical content updates.

Rincian

Terbit di NVD
23 Desember 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
8.8 (High), sumber eaton.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-20: Improper Input Validation
EPSS (30 hari)
0,32% peluang dieksploitasi; lebih tinggi dari 23,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
eaton xcomfort ethernet communication interface Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.