2 matches found
VulnCheck KEV: CVE-2018-12031
Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/nodeupgradesrv.js directory traversal with the firmware parameter in a downloadFirmware action...
9.8CVSS8.2AI score0.19762EPSS
SaveIn wildExploits3References504
PT-2021-15431
Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager IPM versions prior to 1.69 Description The issue is related to improper input validation, allowing an authenticated arbitrary file delete vulnerability. This vulnerability can be exploited by sending specially...
9.6CVSS0.01015EPSS
SaveExploits0References4
20