CVE-2021-23287

The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issue affects: Intelligent Power Manager IPM 1 versions prior to 1.70...

Input validation

The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69...

CVE-2021-23288 Security issues in Intelligent Power Protector

The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69...

CVE-2021-23287 Security issues in Intelligent Power Manager (IPM 1)

The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issue affects: Intelligent Power Manager IPM 1 versions prior to 1.70...

CVE-2021-23286

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior versions...

CVE-2021-23285

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior...

CVE-2021-23284

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior...

PT-2022-9394

Name of the Vulnerable Software and Affected Versions Intelligent Power Protector versions prior to 1.69 Description The issue is caused by insufficient validation of input from certain resources by the IPP software. An attacker would need access to the local subnet and an administrator interacti...

CVE-2021-23287: Improper Neutralization of Input During Web Page Generation

The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issue affects: Intelligent Power Manager IPM 1 versions prior to 1.70...

CVE-2021-23288: Improper Neutralization of Input During Web Page Generation

The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69...

PT-2022-9393

Name of the Vulnerable Software and Affected Versions Intelligent Power Manager IPM 1 versions prior to 1.70 Description The issue is caused by insufficient validation of input for certain resources within the IPM software. Recommendations For versions prior to 1.70, update to version 1.70 or lat...

Eaton Intelligent Power Manager Cross-Site Script Vulnerability

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. A security vulnerability exists in Intelligent Power Manager IPM 1 versions prior to 1.70 that stems from...

Intelligent Power Protector Cross-site Scripting Vulnerability

Intelligent Power Protector is a Intelligent Power Program. A security vulnerability exists in Intelligent Power Protector versions prior to 1.69 that stems from insufficient validation of certain resource inputs by the IPP software. An attacker could exploit this vulnerability to access the loca...

Attacks on Ukraine communications are a major part of the war

Since the start of the Russian invasion of Ukraine, the war on the battlefield has been accompanied by cyber attacks. Those attacks against critical infrastructure have knocked out banking and defense platforms, mostly by targeting several communication systems. In a timeline set up by NetBlocks,...

Yubico ykneo-openpgp data forgeing vulnerability

Yubico ykneo-openpgp is an open source security product from the Swedish company Yubico. It implements the OpenPGP card functionality used on YubiKey NEO devices sold by Yubico. A data forgery issue vulnerability exists in versions prior to Yubico ykneo-openpgp 1.0.10. The vulnerability stems fro...

Mitigating Attacks Against Uninterruptable Power Supply Devices

CISA and the Department of Energy DOE are aware of threat actors gaining access to a variety of internet-connected uninterruptable power supply UPS devices, often through unchanged default usernames and passwords. Organizations can mitigate attacks against their UPS devices, which provide emergen...

CVE-2022-26278

Tenda AC9 v15.03.2.21cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function...

CVE-2022-26278

Tenda AC9 v15.03.2.21cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function...

APC Smart-UPS Power Supply Authentication Bypass

The vulnerability of microprogrammed power supply systems from APC Smart-UPS models series SMT, SMC, SCL, SMX, SRT, and SRTL is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to arbitrarily alter the behavior of the U...

CVE-2021-44477

GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity XXE vulnerability using the DTD parameter entities technique that could result in disclosure and retrieval of arbitrary data on the affected node via an out-of-band OOB attack. The vulnerability is triggered when input...