Eaton Intelligent Power Manager (IPM) < 1.69 Multiple Vulnerabilities (ETN-VA-2021-1000)

The version of Eaton Intelligent Power Manager installed on the remote Windows host is prior to 1.69. It is, therefore, affected multiple vulnerabilities: - Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improp...

CVE-2021-23280

Eaton IPM before 1.69 is affected by CVE-2021-23280, an authenticated arbitrary file upload in IPM’s maps_srv.js via the uploadBackgroud action. A malicious NodeJS file can be uploaded and later code/execution may be possible using specially crafted packets. The vulnerability affects IPM versions...