We make what matters work*

Report an issue

Report a Security Vulnerability

We take security seriously and appreciate your help in keeping our products safe. If you've discovered a vulnerability in a supported Eaton product, please use one of the options below to get in touch with us.

How to Reach Us

You can report a vulnerability in any of the following ways:

Complete the form below (submissions must be in English)
Send an encrypted email to PSIRT@Eaton.com - download our PGP key to get started

Please note: This form is for reporting vulnerabilities in Eaton products only. If your report relates to the eaton.com website or another Eaton web property, please submit your report through our IT Security Disclosure page instead.

Please review Eaton's Privacy Policy and Vulnerability Disclosure Policy before submitting this form.

First Name*

Last Name*

Organization's name

Email Address*

Business Phone

Vulnerability details

Product name (software / hardware / cloud application) - or common name used for the solution

Product version (version number)

URL (for online services vulnerabilities)

Technical description

In as much detail as possible describe the actions performed and the result

Threat/risk assessment

Provide the details of the vulnerability and its resultant risks. If possible, please include the risk assessment using CVSS V3 (high, medium, low)

Software configuration

Provide details of the application/device configuration at the time of the vulnerability

To share screenshots or additional documentation of the vulnerability, use the PGP key on this page

By submitting this form, you understand that the information you provide will be processed in accordance with Eaton's Privacy Policy and Vulnerability Disclosure Policy.

Please select the ways in which Eaton may use your name in publications in connection with the vulnerability you have reported. Your consent is entirely voluntary and is not required for Eaton to review or address your report. (Check any that apply.)

I consent to Eaton identifying me as the reporter of the vulnerability in cybersecurity advisories and vulnerability disclosures.

I consent to Eaton identifying me in vulnerability recognition or "Hall of Fame" publications.

I consent to Eaton identifying me in research papers, white papers, case studies, or similar technical publications relating to the vulnerability.

I consent to Eaton identifying me in media, press releases, or other public communications relating to the vulnerability.

I prefer that Eaton not use my name. I do not consent to being identified in any of the publications listed above.

Withdrawal of Consent

You may withdraw your consent at any time, for all or any of the above uses, by contacting DataProtection@Eaton.com.

Withdrawal of consent will not affect any processing carried out before the withdrawal request was received. Following receipt of a withdrawal request, Eaton will cease any future use of your name for the withdrawn purpose(s) and will update its records accordingly.

I have read and understood Eaton's Privacy Policy.

I have read and understood Eaton's Vulnerability Disclosure Policy.

By submitting this form, I agree that the personal data that I provide can be shared with Eaton, channel partners and third-party providers working on behalf of Eaton in accordance with the Eaton Privacy Policy and in compliance with applicable data privacy laws.

Subscribe to updates

I agree to be informed regularly about Eaton products, promotions and news. I understand and agree that Eaton will use my data, including behavioral data such as web page views and video engagement, to personalize marketing communications. I understand that I can withdraw my consent to receive marketing communications at any time.

Download PGP key

Key ID: 0B11 42D7 B388 5971
Key Type: RSA
Fingerprint: 06C1310CCAF2D8248A1214D50B1142D7B3885971

How to use the PGP key to share vulnerability information with Eaton

The PGP key is an encryption program allowing secure file encrypting and decrypting. You can use the PGP key to provide screenshots and other documentation of the vulnerability you are reporting.

Download the PGP key.
Open PGP software (such as Gpg4win/Kleopatra on Windows).
Click Import.
Select the public key file.
Confirm the import.
Right-click the file you want to send.
Select Sign and Encrypt (or similar).
Choose the recipient’s name/key.
Click Encrypt. A new encrypted file will be created.
Email encrypted file(s) to PSIRT@eaton.com.

Eaton is an intelligent power management company dedicated to improving the quality of life and protecting the environment for people everywhere. We are guided by our commitment to do business right, to operate sustainably and to help our customers manage power ─ today and well into the future. By capitalizing on the global growth trends of electrification and digitalization, we’re accelerating the planet’s transition to renewable energy and helping to solve the world’s most urgent power management challenges.