Eaton Intelligent Power Protector Insecure Cookie Configuration Vulnerability Allowing Man-in-the-Middle Attacks

A vulnerability exists in Eaton Intelligent Power Protector (IPP) due to an insecure cookie configuration. This flaw could enable a network-based attacker to intercept cookies and exploit them in a man-in-the-middle attack. The issue has been addressed in the latest version of Eaton IPP software, available for download from the Eaton download center.

Impact

Exploitation of this vulnerability could lead to a man-in-the-middle attack, allowing an attacker to intercept and potentially manipulate cookie data.

Remediation

Users are advised to update to the latest version of Eaton Intelligent Power Protector software, available on the Eaton download center.