CVE-2024-31414

6.1 mediumEPSS 0.3%

Medium (6.1) in eaton foreseer electrical power monitoring system. EPSS 0.3% chance of exploitation in the next 30 days.

The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages. However, the input fields for this feature in the Eaton Foreseer software lacked proper input sanitization on the server-side, which could lead to injection and execution of malicious scripts when abused by bad actors.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

eaton:foreseer_electrical_power_monitoring_system

References

https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2024-1008.pdf

Check your stack JSON