Security notifications
Our dedicated team of cybersecurity experts provides guidance on potential security threats or vulnerabilities for Eaton products and solutions.
Cybersecurity notifications are available only in English.
-
Vulnerability Advisory for Bluekeep vulnerability CVE-2019-0708 (June 2019)
(PDF 237 KB)
-
CVE-2019-5625 - Halo Home Smart Lighting Vulnerability Advisory (May 2019)
(PDF 32 KB)
-
Security Notification regarding EasySoft v6 (May 2019)
(PDF 134 KB)
-
Vulnerability Advisory for Intelligent Power Management (IPM) CVE-2018-12031 (January 2019)
(PDF 367 KB)
-
Vulnerability Advisory for XP-503 Panel PC (December 2018)
(PDF 254 KB)
-
Vulnerability Advisory for xComfort – Smart Home Controller (December 2018)
(PDF 215 KB)
-
Vulnerability advisory for Network Card-MS for UPS (October 2018)
(PDF 211 KB)
-
Vulnerability advisory for PX 4000/6000/8000 Meters: update to latest firmware to mitigate known vulnerabilities (Aug 2018)
(PDF 153 KB)
-
Vulnerability advisory for 9000X Drive: apply latest patch to remediate against a known vulnerability (June 2018)
(PDF 148 KB)
-
WannaCry advisory for XP device family: apply this latest security patch to prevent an infection of WannaCry Ransomware in your network (April 2018)
(PDF 425 KB)
-
Meltdown and Spectre Analysis for XV/XC/XP device family: we recommend deploying normal IT security standards and using only trustworthy software and sources (February 2018)
(PDF 147 KB)
-
WannaCry ransomware: view our guidance regarding the Microsoft patch MS17-010 and steps to consider with regard to SMB traffic (June 2017)
(PDF 42 KB)
-
xComfort Ethernet communication interface (ECI): earlier versions of our xComfort Ethernet Communication Interface could be exploited; we recommend that users download our firmware patch and apply to affected products (February 2017)
(PDF 49 KB)
-
Petya malware: this worm virus can infect Windows computers running vulnerable version of Microsoft Server Message Block 1.0 (SMBv1) server (July 2017)
(PDF 80 KB)
-
PXDBP dashboard: for enhanced security, please follow this guideline on configuring and maintaining your PXDBP dashboard (June 2017)
(PDF 747 KB)
-
Advanced Monitored ePDU vulnerability: earlier versions of this product have been discontinued, users of the legacy products should follow the recommendations outlined in our white paper (November 2016)
(PDF 53 KB)
ePDU vulnerabilty ICS-VU-148812 communications—external website
-
ELCSoft programming software: install our new software revision that eliminates reported vulnerability (June 2016)
(PDF 41 KB)
-
iLumin EG2-NA, iLight EG2: upgrade to latest version to avoid potential vulnerabilities with Ethernet Gateway (February 2016)
(PDF 49 KB)
-
TCP/IP protocol non-conformance: we have identified potential vulnerabilities affecting Eaton’s Cooper Power series Form 6 recloser control and Idea/IdeaPLUS relay and recommend that customers using these products take advantage of the most recent software/firmware versions available (August 2015)
(PDF 56 KB)
-
glibc (GHOST) vulnerability: we have fixed the issue in the latest firmware releases for the products listed (June 2015)
(PDF 96 KB)
-
Eaton Visual Designer software: we recommend that users of the affected products upgrade versions V7.0.0.0 through V7.1.2.2 to the latest version (May 2015)
(PDF 125 KB)
-
Linux system glibc (GHOST) advisory: we have reviewed the included list of Linux products and confirmed that they currently are not affected by this vulnerability (February 2015)
(PDF 77 KB)
-
Network time protocol (NTP) 2.4.7 vulnerability: we have fixed the issue in the latest firmware release, v.3.0.8 of the Power Xpert Gateway 200E/400E/600E/800E (February 2015)
(PDF 145 KB)
-
Network time protocol (NTP) vulnerabilities: we have confirmed that this list of Eaton products are not currently affected by this Linux vulnerability (January 2015)
(PDF 57 KB)
-
Shellshock bug: we have confirmed that this list of Linux products are currently not affected by this vulnerability (October 2014)
(PDF 60 KB)
-
Heartbleed bug: we have confirmed that this list of Eaton products currently do not use the affected OpenSSL version (May 2014)
(PDF 78 KB)
