Eaton Intelligent Power Manager Infrastructure
view advisory published 2022-05-10
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code using untrusted data.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-23286US | high8.0 | — | ||
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton I… | ||||
| CVE-2021-23285US | medium4.8 | — | ||
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability. This… | ||||
| CVE-2021-23284US | medium4.8 | — | ||
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability. This is… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (3)
- MitigationEaton Intelligent Power Manager Infrastructure (IPM Infrastructure)
Change default passwords following initial startup. Use complex secure passwords or passphrases.
- MitigationEaton Intelligent Power Manager Infrastructure (IPM Infrastructure)
Change default passwords following initial startup. Use complex secure passwords or passphrases.
- MitigationEaton Intelligent Power Manager Infrastructure (IPM Infrastructure)
Change default passwords following initial startup. Use complex secure passwords or passphrases.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan