Eaton UPS 9PX 8000 SP Devices Expose SNMP User Passwords

CVE-2018-9280

Summary

Eaton UPS 9PX 8000 SP devices exhibit a significant security flaw allowing unauthorized access to SNMP version 3 user passwords. The web interface of the device displays these passwords in cleartext, enabling an attacker to view confidential credentials simply by inspecting the source code of the web page. This vulnerability compromises the integrity of user accounts, exposing both read and write user passwords, and poses a serious risk to the security of sensitive operations relying on these devices.

References