Read the docs

Eaton

Records75All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high31CVSS 7.0–8.9

Exploited now

Eaton records in CISA KEV

No Eaton vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Intelligent Power Manager 12 records HIGH Intelligent Power Protector 12 records HIGH Intelligent Power Manager Virtual Appliance 5 records HIGH Easysoft 4 records LOW Foreseer Electrical Power Monitoring System 4 records MEDIUM Ups Companion 4 records MEDIUM 9px Ups Firmware 3 records LOW Elcsoft 3 records LOW

Records

5 records in Intelligent Power Manager Virtual Appliance · all components

TI-2021-06017 CVE-2021-23279 · GHSA-h7cg-8375-67fx

Arbitrary File delete

Priority HIGH 65

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action usi…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.27947 Published 2021-04-13 Fixed in 1.69 CWE-20
TI-2021-06018 CVE-2021-23280 · GHSA-52vj-66ff-3q3r

Arbitrary file upload in Eaton Intelligent Power manager

Priority MEDIUM 44

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00904 Published 2021-04-13 Fixed in 1.69 CWE-434
TI-2021-06016 CVE-2021-23278 · GHSA-9wgr-5887-h4gv

Arbitrary File delete

Priority MEDIUM 43

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/maps_srv.js with action removeBackground and serve…

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01052 Published 2021-04-13 Fixed in 1.69 CWE-20
Open these records in search →