Eaton Firmware Upgrade Server Identity Check Vulnerability Allowing Man-in-the-Middle Attacks

A vulnerability exists in the server identity check mechanism for firmware upgrades conducted through the command shell. The implementation is insecure, potentially enabling an attacker to execute a man-in-the-middle attack. This issue has been addressed in the latest version available on the Eaton Download Center.

Impact

Exploitation of this vulnerability could lead to unauthorized interception and manipulation of firmware upgrade processes, allowing an attacker to introduce malicious firmware or disrupt the upgrade process.

Remediation

Users are advised to update to the latest version available on the Eaton Download Center.