Back to Database
Status published
Medium
CVE-2018-9280
An issue was discovered on Eaton UPS 9PX 8000 SP...
Vulnerability Description
An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user's password. The web page displayed by the appliance contains the password in cleartext. Passwords of the read and write users could be retrieved by browsing the source code of the webpage.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-9280
Credits & Attribution
No credits recorded in the NVD database.
More from eaton
View All →CVE-2020-7915
An issue was discovered on Eaton 5P 850 devices. The...
Medium
4.8
CVE-2018-9281
An issue was discovered on Eaton UPS 9PX 8000 SP...
High
8.8
CVE-2018-9279
An issue was discovered on Eaton UPS 9PX 8000 SP...
Medium
4.9
CVE-2018-16158
Eaton Power Xpert Meter 4000, 6000, and 8000 devices before...
Critical
9.8
CVE-2018-12031
Local file inclusion in Eaton Intelligent Power Manager v1.6 allows...
Critical
9.8
Affected Vendor
eaton
View all reports →Affected Software
9px ups firmware
Vulnerable Versions:
Unknown
Timeline
Official Publish:
October 24th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.