CVE-2021-23286

Description

References

• eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-%28IPM%29-Infrastructure-Vulnerability-Advisory_1001c_V1.0.pdf
• eaton.com/content/dam/eaton/products/backup-power-ups-surge-it-power-distribution/power-management-software-connectivity/eaton-intelligent-power-manager/software/ipm-understand-edition-emea/eaton-ipminfra-eolmemo-en-us.pdf. · Broken Link

More vulnerabilities in intelligent power manager

• CVE-2021-23285MEDIUM 4.8Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to reflected …
• CVE-2021-23287MEDIUM 5.4The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issue affects: Intellige…
• CVE-2021-23281CRITICAL 10.0Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does …
• CVE-2021-23280CRITICAL 9.9Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js al…
• CVE-2021-23279CRITICAL 10.0Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to impr…