VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Feb 13, 2017· Updated Jun 17, 2026

CVE-2016-9357

CVE-2016-9357

Description

An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life (EoL) and no longer supported: EAMxxx prior to June 30, 2015, EMAxxx prior to January 31, 2014, EAMAxx prior to January 31, 2014, EMAAxx prior to January 31, 2014, and ESWAxx prior to January 31, 2014. An unauthenticated attacker may be able to access configuration files with a specially crafted URL (Path Traversal).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Eaton/Emaaxx Series Epdu Firmware4 versions
    cpe:2.3:o:eaton:eamaxx_series_epdu_firmware:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:eaton:eamaxx_series_epdu_firmware:*:*:*:*:*:*:*:*range: <=01-31-2014
    • cpe:2.3:o:eaton:eamxxx_series_epdu_firmware:*:*:*:*:*:*:*:*range: <=06-30-2015
    • cpe:2.3:o:eaton:emaaxx_series_epdu_firmware:*:*:*:*:*:*:*:*range: <=01-31-2014
    • cpe:2.3:o:eaton:emaxxx_series_epdu_firmware:*:*:*:*:*:*:*:*range: <=01-31-2014
  • Eaton/Eswaxx Series Epdu Firmware
    cpe:2.3:o:eaton:eswaxx_series_epdu_firmware:*:*:*:*:*:*:*:*
    Range: <=01-31-2014
  • Eaton/EAMxxxllm-create
    Range: <June 30, 2015
  • Eaton/EMAxxxllm-create
    Range: <January 31, 2014
  • Eaton/ePDUllm-fuzzy

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.