Improper Input Validation in Network-M2 Card by Eaton

CVE-2025-22495

What is CVE-2025-22495?

An improper input validation flaw was identified in the configuration field of Eaton's Network-M2 card, which allows authenticated high privileged users to execute arbitrary commands. This vulnerability poses significant security risks, especially in systems relying on the Network-M2 card, which is now end-of-life as of early 2024. Users are encouraged to upgrade to the Network-M3 model, which serves as a robust replacement for the vulnerable product.

References