Eaton Intelligent Power Manager mc2 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Eaton Intelligent Power Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within systemsrv.js. The issue results from the lack of proper validation of a...

Eaton Intelligent Power Manager Incorrect Privilege Assignment Vulnerability

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. A security vulnerability exists in Eaton Intelligent Power Manager version 1.67 and earlier. An attacker ca...

Eaton Intelligent Power Manager Input Validation Error Vulnerability

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An input validation error vulnerability exists in Eaton IPM version 1.67 and prior versions, which stems fr...

CVE-2020-6651

Improper Input Validation in Eaton's Intelligent Power Manager IPM v 1.67 & prior on file name during configuration file import functionality allows attackers to perform command injection or code execution via specially crafted file names while uploading the configuration file in the application...

CVE-2020-6651

Improper Input Validation in Eaton's Intelligent Power Manager IPM v 1.67 & prior on file name during configuration file import functionality allows attackers to perform command injection or code execution via specially crafted file names while uploading the configuration file in the application...

CVE-2020-6651

CVE-2020-6651 affects Eaton Intelligent Power Manager (IPM) versions 1.67 and earlier. The vulnerability is due to improper input validation on the configuration file import file name, which allows an attacker to trigger command injection or code execution via specially crafted file names during ...

CVE-2020-6652

CVE-2020-6652 affects Eaton Intelligent Power Manager (IPM) v1.67 and earlier. The vulnerability is an incorrect privilege assignment that lets non-admin users upload system configuration files by sending specially crafted requests, potentially enabling manipulation of configurations with paramet...

Eaton Intelligent Power Manager File Containment Vulnerability

Eaton Intelligent Power Manager is a tool from Eaton Corporation of America for monitoring and managing power in house or virtual environments. A security vulnerability exists in Eaton Intelligent Power Manager version 1.6. The vulnerability can be exploited by an attacker with the 'firmware'...

CVE-2018-12031

Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/nodeupgradesrv.js directory traversal with the firmware parameter in a downloadFirmware action...

Directory traversal

Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/nodeupgradesrv.js directory traversal with the firmware parameter in a downloadFirmware action...

CVE-2018-12031

Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/nodeupgradesrv.js directory traversal with the firmware parameter in a downloadFirmware action...

CVE-2018-12031

CVE-2018-12031 affects Eaton Intelligent Power Manager v1.6 with a Local File Inclusion through directory traversal in the downloadFirmware action (server/node_upgrade_srv.js). The root cause is improper handling of the firmware parameter, enabling an attacker to traverse directories and potentia...