The vulnerability arises from insecure library loading in the Eaton Intelligent Power Protector executable. The weakness aligns with CWE-427. An attacker who can influence the software package can cause the system to load an attacker‑supplied library, leading to arbitrary code execution within the IPP process.

The affected product is Eaton Intelligent Power Protector (IPP). Version information is not specified, but the issue affects releases prior to the latest update stated in the advisory and applies to all installations that run the vulnerable executable.

The CVSS score of 7.8 points to a high severity. The probability of exploitation is very low, as indicated by the EPSS score of less than 1 %. The vulnerability is not listed in the CISA KEV catalog. Likely attack scenarios involve the attacker having access to the software package or installation media, implying a local or supply‑chain vector. Once the vulnerable library is loaded, the attacker can execute code with the privileges of the IPP process, potentially gaining full control over the device.