PT-2025-41850 · Eaton · Eaton Ipp

Kazuma Matsumoto · Published 2025-10-14 · Updated 2025-11-03 · CVE-2025-59889

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eaton IPP (affected versions not specified)

Description Improper authentication of library files within the Eaton IPP software installer could allow an attacker with access to the software package to execute arbitrary code. The issue involves how the software verifies library files during the installation process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-59889

Affected Products

Eaton Ipp

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-59889 · Security Note
• https://twitter.com/CVEnew/status/1977971009429942765 · Twitter Post
• https://twitter.com/CveFindCom/status/1977972613163954239 · Twitter Post
• https://t.me/CVEtracker/34829 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1977990067772678567 · Twitter Post
• https://t.me/cveNotify/141301 · Telegram Post
• https://twitter.com/CveTodo/status/1977984803795247536 · Twitter Post
• https://eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1009.pdf · Note
• https://twitter.com/cracbot/status/1979865150266982888 · Twitter Post