---
id: 4211
title: "Eaton UPS 9PX 8000 SP - Multiple Vulnerabilities"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/eaton-ups-9px-8000-sp-advisory"
published_at: "2018-10-19T00:00:00Z"
tags: ["firmware", "csrf", "vulnerability-advisory", "password-disclosure", "eaton", "ups"]
phying_url: "https://phying.com/item/4211"
lang: en
---

# Eaton UPS 9PX 8000 SP - Multiple Vulnerabilities

## Summary

Bishop Fox found CSRF in password changes and two cleartext password disclosures in the Eaton UPS 9PX 8000 SP web interface (CVE-2018-9279/9280/9281); firmware fixes exist.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2018-10-19T00:00:00Z
- **Original:** https://bishopfox.com/blog/eaton-ups-9px-8000-sp-advisory
- **Phying News:** https://phying.com/item/4211