Lucene search

EatonCVE-2021-23288

HistoryApr 01, 2022 - 11:15 p.m.

CVE-2021-23288

2022-04-0123:15:08

CWE-79

Eaton

web.nvd.nist.gov

cve-2021-23288

ipp software

system compromise

nvd

vulnerability

CVSS2

2.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.6

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H

AI Score

4.9

Confidence

High

EPSS

Percentile

12.6%

JSON

The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.

Affected configurations

Nvd

Node

eatonintelligent_power_protectorRange<1.69

VendorProductVersionCPE
eatonintelligent_power_protector*cpe:2.3:a:eaton:intelligent_power_protector:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
eaton	intelligent_power_protector	*	cpe:2.3:a:eaton:intelligent_power_protector::::::::

CNA Affected

[
  {
    "product": "Intelligent Power Protector",
    "vendor": "Eaton",
    "versions": [
      {
        "lessThan": "1.69",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1002b_V1.0.pdf

CVSS2

2.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.6

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H

AI Score

4.9

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-23288