CVE-2025-59889

Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the software package. This security issue has been fixed in the latest version of IPP which is available on the Eaton download center.

CVSS v3 8.6 HIGH

8.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1009.pdf

Configurations

No configuration.

History

08 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) La autenticación indebida de archivos de biblioteca en el instalador del software Eaton IPP podría conducir a la ejecución de código arbitrario por parte de un atacante con acceso al paquete de software. Este problema de seguridad ha sido corregido en la última versión de IPP, la cual está disponible en el centro de descargas de Eaton.

Information

Published : 2025-10-14 06:15

Updated : 2026-10-08 12:10

NVD link : CVE-2025-59889

Mitre link : CVE-2025-59889

CVE.ORG link : CVE-2025-59889

JSON object : View

Products Affected

No product.

CWE

CWE-427

Uncontrolled Search Path Element

{"id": "CVE-2025-59889", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-59889", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-10-14T15:28:26.448154Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "CybersecurityCOE@eaton.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}]}, "affected": [{"source": "CybersecurityCOE@eaton.com", "affectedData": [{"vendor": "Eaton", "product": "Eaton IPP software", "versions": [{"status": "affected", "version": "0", "lessThan": "1.76", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}]}], "published": "2025-10-14T06:15:34.810", "references": [{"url": "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1009.pdf", "source": "CybersecurityCOE@eaton.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "CybersecurityCOE@eaton.com", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the software package.\u00a0\n\nThis security issue has been fixed in the latest version of IPP which is available on the Eaton download center."}, {"lang": "es", "value": "La autenticaci\u00f3n indebida de archivos de biblioteca en el instalador del software Eaton IPP podr\u00eda conducir a la ejecuci\u00f3n de c\u00f3digo arbitrario por parte de un atacante con acceso al paquete de software.\n\nEste problema de seguridad ha sido corregido en la \u00faltima versi\u00f3n de IPP, la cual est\u00e1 disponible en el centro de descargas de Eaton."}], "lastModified": "2026-10-08T12:10:00.217", "sourceIdentifier": "CybersecurityCOE@eaton.com"}