Eaton Intelligent Power Manager Infrastructure
Advisory ansehen veröffentlicht 2022-05-10
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code using untrusted data.
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-23286US | high8.0 | — | ||
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton I… | ||||
| CVE-2021-23285US | medium4.8 | — | ||
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability. This… | ||||
| CVE-2021-23284US | medium4.8 | — | ||
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability. This is… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (3)
- MitigationEaton Intelligent Power Manager Infrastructure (IPM Infrastructure)
Change default passwords following initial startup. Use complex secure passwords or passphrases.
- MitigationEaton Intelligent Power Manager Infrastructure (IPM Infrastructure)
Change default passwords following initial startup. Use complex secure passwords or passphrases.
- MitigationEaton Intelligent Power Manager Infrastructure (IPM Infrastructure)
Change default passwords following initial startup. Use complex secure passwords or passphrases.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan