CVE-2021-23278

Eaton IPM before 1.69 is vulnerable to an authenticated arbitrary file-delete via improper input validation in maps_srv.js (removeBackground) and node_upgrade_srv.js (removeFirmware). An attacker with valid credentials can delete files on the IPM host. Remediation per linked advisories: upgrade t...