Improper input validation in the session management interface of the Eaton Tripp Lite PADM firmware allows an authenticated user to elevate privileges and gain unrestricted access to the device.

The vulnerability affects Eaton Tripp Lite PADM devices; specific firmware versions are not identified in the advisory.

The CVSS score of 8.8 indicates high severity, but the EPSS score of less than 1% suggests a low probability of exploitation. Because the flaw requires authentication, an attacker must first obtain valid credentials, typically through an insider threat or credential compromise. The vulnerability is not listed in CISA KEV, implying no reported widespread exploitation at this time, so the overall risk is moderate for organizations that have yet to apply a patch.