CVE-2021-23281

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in metadriversrv.js class. Attackers can send a specially crafted packet to make IPM connect to rou...

Remote code execution

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in metadriversrv.js class. Attackers can send a specially crafted packet to make IPM connect to rou...

CVE-2021-23279

CVE-2021-23279 affects Eaton IPM prior to 1.69. The vulnerability is an unauthenticated arbitrary file delete caused by improper input validation in the meta_driver_srv.js class (saveDriverData) when using an invalidated driverID. An attacker could send crafted packets to delete files on the IPM ...