עברית

Vulnerability Intelligence

CVE-2025-59889

High 8.6

Published
Last modified
NVD status
Deferred

Description

Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the software package.  This security issue has been fixed in the latest version of IPP which is available on the Eaton download center.

References1

Metrics

CVSS 3.1
8.6 HIGH Score source: CNA CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS — exploit probability
0% percentile: 7 · as of 9 November 2026
CWE
CWE-427

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.