Ups Companion
Monthly
Local code execution in Eaton UPS Companion stems from insecure library loading (CWE-427), allowing an attacker who already has low-privilege access to the host to place a malicious library in a directory the trusted executable searches, causing the process to load and execute attacker code. Eaton says the flaw is fixed in the latest UPS Companion release on its download center, and the vendor scores it 7.8 (local, high complexity, low privileges required, no user interaction). No public exploit code and no CISA KEV entry are present at time of analysis, so the practical risk is bounded by the need for pre-existing local access and a writable search location rather than any remote path.
Arbitrary code execution can occur on hosts running Eaton UPS Companion because the product's installer uses an improperly quoted search path (CWE-428), allowing an attacker who already has local file-system write access to drop a malicious executable into a directory that a privileged install, update, or service-start process later resolves and launches. Eaton rates the issue 6.7 (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H); exploitation is local-only, requires pre-existing elevated/local access (PR:H) and alignment of the writable-directory and launch-timing conditions (AC:H), confining realistic risk to insider or already-foothold scenarios. No public exploit code and no confirmed active exploitation were identified at time of analysis, and Eaton has released a fixed version of EUC on its download center.
Improper authentication/verification of library files in the Eaton UPS Companion (EUC) installer lets an attacker who can write to the installer package achieve arbitrary code execution with the privileges of the user who runs it, classifying it as a CWE-427 uncontrolled search-path (DLL/library hijacking) flaw. Rated CVSS 8.6 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), exploitation is local-only and unauthenticated on the target host, but requires that the attacker already have file-write access to the installer package or its staging/distribution location and that a victim subsequently launches the tampered installer. Eaton states the issue is fixed in the latest EUC release available from its download center; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the scope-change (S:C) and high confidentiality/integrity/availability impact reflect the installer's own privileged execution context rather than a remotely reachable attack surface.
UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.
Local code execution in Eaton UPS Companion stems from insecure library loading (CWE-427), allowing an attacker who already has low-privilege access to the host to place a malicious library in a directory the trusted executable searches, causing the process to load and execute attacker code. Eaton says the flaw is fixed in the latest UPS Companion release on its download center, and the vendor scores it 7.8 (local, high complexity, low privileges required, no user interaction). No public exploit code and no CISA KEV entry are present at time of analysis, so the practical risk is bounded by the need for pre-existing local access and a writable search location rather than any remote path.
Arbitrary code execution can occur on hosts running Eaton UPS Companion because the product's installer uses an improperly quoted search path (CWE-428), allowing an attacker who already has local file-system write access to drop a malicious executable into a directory that a privileged install, update, or service-start process later resolves and launches. Eaton rates the issue 6.7 (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H); exploitation is local-only, requires pre-existing elevated/local access (PR:H) and alignment of the writable-directory and launch-timing conditions (AC:H), confining realistic risk to insider or already-foothold scenarios. No public exploit code and no confirmed active exploitation were identified at time of analysis, and Eaton has released a fixed version of EUC on its download center.
Improper authentication/verification of library files in the Eaton UPS Companion (EUC) installer lets an attacker who can write to the installer package achieve arbitrary code execution with the privileges of the user who runs it, classifying it as a CWE-427 uncontrolled search-path (DLL/library hijacking) flaw. Rated CVSS 8.6 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), exploitation is local-only and unauthenticated on the target host, but requires that the attacker already have file-write access to the installer package or its staging/distribution location and that a victim subsequently launches the tampered installer. Eaton states the issue is fixed in the latest EUC release available from its download center; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the scope-change (S:C) and high confidentiality/integrity/availability impact reflect the installer's own privileged execution context rather than a remotely reachable attack surface.
UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.