Improper Input Validation in Eaton xComfort ECI's Web Interface
CVE-2025-59886

8.8HIGH

Key Information:

Vendor

Eaton

Status
Eaton Xcomfort Eci
Vendor
CVE Published:
23 December 2025

What is CVE-2025-59886?

The Eaton xComfort ECI's web interface contains an improper input validation flaw that allows an attacker with network access to execute privileged commands. This vulnerability highlights the critical importance of robust input validation measures in web applications. As Eaton discontinues the product, users are advised that no security updates or support will be provided, further increasing the risk posed by this vulnerability. It is essential for users to consider alternative solutions to ensure their systems remain secure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Eaton xComfort ECI 0

References

https://www.eaton.com/content/dam/eaton/company/news-insi...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.