CVE-2021-23281 Remote Code execution

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in metadriversrv.js class. Attackers can send a specially crafted packet to make IPM connect to rou...

CVE-2021-23279 Arbitrary File delete

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in metadriversrv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete...

CVE-2021-23279

CVE-2021-23279 affects Eaton IPM prior to 1.69. The vulnerability is an unauthenticated arbitrary file delete caused by improper input validation in the meta_driver_srv.js class (saveDriverData) when using an invalidated driverID. An attacker could send crafted packets to delete files on the IPM ...

CVE-2021-23276 Improper Neutralization of Special Elements used in an SQL Command

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerability. Successful exploitation of this vulnerability can allow attackers to add users in the data base...

CVE-2021-23276

CVE-2021-23276 affects Eaton Intelligent Power Manager (IPM) versions prior to 1.69. The EU/ICS/Nessus/NVD documents describe an authenticated SQL injection vulnerability that can allow an attacker to add users to the IPM database. The vulnerability is part of a family of IPM issues in 1.69 and e...

CVE-2021-23278

Eaton IPM before 1.69 is vulnerable to an authenticated arbitrary file-delete via improper input validation in maps_srv.js (removeBackground) and node_upgrade_srv.js (removeFirmware). An attacker with valid credentials can delete files on the IPM host. Remediation per linked advisories: upgrade t...

CVE-2021-23278 Arbitrary File delete

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/mapssrv.js with action removeBackground and server/nodeupgradesrv.js with action removeFirmware. An attacker can send specially...

Eaton Intelligent Power Manager SQL注入漏洞

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An SQL injection vulnerability exists in Eaton Intelligent Power Manager versions prior to 1.69, which is...

Eaton Intelligent Power Manager 代码注入漏洞

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. A remote code execution vulnerability exists in Eaton Intelligent Power Manager versions prior to 1.69, whi...

Eaton Intelligent Power Manager 代码问题漏洞

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An arbitrary file upload vulnerability exists in Eaton Intelligent Power Manager IPM versions prior to 1.69...

Eaton Intelligent Power Manager 输入验证错误漏洞

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An arbitrary file deletion vulnerability exists in Eaton Intelligent Power Manager versions prior to 1.69,...

Eaton Easysoft Input Validation Error Vulnerability

Eaton Easysoft is a programming application for industrial applications from Eaton Corporation. The software is used to program Easy controllers and displays, and the wiring diagrams can be edited and displayed in a format. A security vulnerability exists in Eaton easySoft software v7.20 and prio...

Eaton Easysoft Denial of Service Vulnerability

Eaton Easysoft is a programming application for industrial applications from Eaton Corporation. The software is used to program Easy controllers and displays, and the wiring diagrams can be edited and displayed in a format. A denial of service vulnerability exists in Eaton easySoft software versi...

CVE-2020-6656

Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability aris...

CVE-2020-6656

Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability aris...

CVE-2020-6655

The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises du...

CVE-2020-6656

Eaton EASYsoft vulnerable to a Type Confusion/file parsing issue in v7.xx prior to v7.22 (affecting v7.20 and earlier). The flaw allows malformed .E70 files to crash or potentially execute code; ICS-CISA notes local access and not remote exploitation, with patch available to v7.22. Remediation: u...

CVE-2020-6655

Eaton easySoft software v7.xx before 7.22 is affected by an out-of-bounds parsing/validation vulnerability in .E70 files, enabling local code execution or application crash. Root cause: improper parsing of E70 content. Affected products: easySoft v7.xx up to 7.21. Mitigation: upgrade to v7.22 (pa...

Eaton Easysoft 缓冲区错误漏洞

Eaton Easysoft is a programming application for industrial applications from Eaton Corporation. The software is used to program Easy controllers and displays, and the wiring diagrams can be edited and displayed in a format. A security vulnerability exists in Eaton easySoft software v7.20 and prio...

Eaton Easysoft 安全漏洞

Eaton Easysoft is a programming application for industrial applications from Eaton Corporation. The software is used to program Easy controllers and displays, and the wiring diagrams can be edited and displayed in a format. A denial of service vulnerability exists in Eaton easySoft software versi...