Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Eaton Component: Intelligent Power Manager Virtual Appliance Clear all filters
TI-2021-06018 CVE-2021-23280 · GHSA-52vj-66ff-3q3r

Arbitrary file upload in Eaton Intelligent Power manager

Priority MEDIUM 44

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00904 Published 2021-04-13 Fixed in 1.69 CWE-434
TI-2021-06017 CVE-2021-23279 · GHSA-h7cg-8375-67fx

Arbitrary File delete

Priority HIGH 65

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action usi…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.27947 Published 2021-04-13 Fixed in 1.69 CWE-20
TI-2021-06016 CVE-2021-23278 · GHSA-9wgr-5887-h4gv

Arbitrary File delete

Priority MEDIUM 43

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/maps_srv.js with action removeBackground and serve…

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01052 Published 2021-04-13 Fixed in 1.69 CWE-20