ICSA-21-110-06

icsaUScisa_csaf_ot

Eaton Intelligent Power Manager

Advisory ansehen veröffentlicht 2021-04-20

Successful exploitation of these vulnerabilities could allow attackers to change certain settings, upload code, delete files, or execute commands.

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-23281UScritical10.0—
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via cover…
CVE-2021-23280UScritical9.9—
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to upload a malicious N…
CVE-2021-23279UScritical10.0—
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv…
CVE-2021-23278UScritical9.6—
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/maps_srv.j…
CVE-2021-23277UScritical10.0—
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before us…
CVE-2021-23276UShigh8.8—
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerability.…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (18)

  • MitigationEaton Intelligent Power Manager (IPM)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Manager (IPM)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Manager (IPM)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Manager (IPM)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Manager (IPM)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Manager (IPM)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Manager Virtual Appliance (IPM VA)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Manager Virtual Appliance (IPM VA)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Manager Virtual Appliance (IPM VA)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Manager Virtual Appliance (IPM VA)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Manager Virtual Appliance (IPM VA)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Manager Virtual Appliance (IPM VA)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Protector (IPP)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Protector (IPP)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Protector (IPP)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Protector (IPP)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Protector (IPP)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

  • MitigationEaton Intelligent Power Protector (IPP)

    Change default passwords following initial startup. Use complex secure passwords or passphrases.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan