Eaton Intelligent Power Manager (Ipm)
9 CVEs affecting Eaton Intelligent Power Manager (Ipm). Latest disclosed: 2024-11-25. Critical: 1, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-23281 | Critical | 10.0 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the da… |
CVE-2020-6651 | High | 8.8 | 2020-05-07 | Improper Input Validation in Eaton's Intelligent Power Manager (IPM) v 1.67 & prior on file name during configuration file import functionality allows attacker… |
CVE-2021-23278 | High | 8.7 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation… |
CVE-2021-23277 | High | 8.3 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax… |
CVE-2021-23280 | High | 8.0 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to… |
CVE-2021-23279 | High | 8.0 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validati… |
CVE-2020-6652 | High | 7.8 | 2020-05-07 | Incorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin users to upload the system configuration… |
CVE-2021-23276 | High | 7.1 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to explo… |
CVE-2021-23282 | Medium | 5.2 | 2024-11-25 | Eaton Intelligent Power Manager (IPM) prior to 1.70 is vulnerable to stored Cross site scripting. The vulnerability exists due to insufficient validation of in… |