What is CVE-2022-33859?

CVE-2022-33859 is a high-severity vulnerability in Eaton Foreseer_electrical_power_monitoring_system, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.1/10. Published 2022-10-28.

How severe is CVE-2022-33859?

High severity. CVSS v3 base score is 8.1 out of 10.

Arbitrary file upload in Eaton Foreseer_electrical_power_monitoring_system

CVE-2022-33859

A security vulnerability was discovered in the Eaton Foreseer EPMS software. Foreseer EPMS connects an operation’s vast array of devices to assist in the reduction of energy consumption and avoid unplanned downtime caused by the failures o…

Vulnerability class: Unrestricted File Upload

EPSS: 0.003 (26.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H.

Affected products

Eaton Foreseer_electrical_power_monitoring_system
Eaton Foreseer Epms — versions 7.0, 4.0

Weakness classification (CWE)

CWE-434 — Unrestricted Upload of File with Dangerous Type

References

CybersecurityCOE@eaton.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-33859?: CVE-2022-33859 is a high-severity vulnerability in Eaton Foreseer_electrical_power_monitoring_system, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.1/10. Published 2022-10-28.
How severe is CVE-2022-33859?: High severity. CVSS v3 base score is 8.1 out of 10.