Description
Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center.
Affected products
eaton: ups companion
References1
- www.eaton.com/content/dam/eaton/company/news-insights/cybersecu… PatchVendor Advisory
Metrics
- CVSS 3.1
-
6.7
MEDIUM
Score source: CNA
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H - EPSS — exploit probability
- 0% percentile: 9 · as of 11 November 2026
- CWE
- CWE-428
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.