Intelligent Power Protector
13 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Intelligent Power Protector, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.
Intelligent Power Protector CVEs per month
| Month | CVEs |
|---|---|
| 2024-11 | 1 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 5 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
| 2026-10 | 0 |
Severity
How the 13 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High6
- Medium7
Latest CVEs
The 13 most recently published vulnerabilities affecting Intelligent Power Protector.
- CVE-2026-22619Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the software package. ...7.8
- CVE-2026-22618A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute, potentially exposing users to web‑based at...5.9
- CVE-2026-22617Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle ...5.7
- CVE-2026-22616Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This security issue h...6.5
- CVE-2026-22615Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and access to the local system to inject malicious c...6.0
- CVE-2022-33861Insufficient verification of authenticity in IPP5.1
- CVE-2021-23283Security issues in Eaton Intelligent Power Protector (IPP)5.2
- CVE-2021-23288Security issues in Intelligent Power Protector5.6
- CVE-2021-23280Arbitrary File upload8.0
- CVE-2021-23277Improper Neutralization of Directives in Dynamically Evaluated Code8.3
- CVE-2021-23279Arbitrary File delete8.0
- CVE-2021-23276Improper Neutralization of Special Elements used in an SQL Command7.1
- CVE-2021-23278Arbitrary File delete8.7
Product grouping is registry-driven, with AI assist and human review. How it works