CVE-2025-59889CWE-427

CVE-2025-59889

High · published October 14, 2025

CVSS v3.1
8.6
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the software package.

This security issue has been fixed in the latest version of IPP which is available on the Eaton download center.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2025-10-14T10:15Z
References (1)
https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1009.pdf · [email protected]
EPSS history
Timeline
  • 14 OCT 05:11Z
    Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the…
    cvelistv5