CVE-2026-22613
The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle at…
Published: 2026-02-09 · CVSS: 5.7 · CVSS 3.1
The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton Network M3 which is available on the Eaton download center.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7