PT-2021-15431

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager IPM versions prior to 1.69 Description The issue is related to improper input validation, allowing an authenticated arbitrary file delete vulnerability. This vulnerability can be exploited by sending specially...

PT-2021-15432

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager IPM versions prior to 1.69 Description The issue arises from improper input validation in the meta driver srv.js class, specifically with the saveDriverData action using an invalidated driverID. This allows an...

PT-2021-15433

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager IPM versions prior to 1.69 Description The issue allows for authenticated arbitrary file upload. Specifically, the maps srv.js component is vulnerable, enabling an attacker to upload malicious NodeJS files using...

PT-2021-7433

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager IPM versions prior to 1.69 Description The issue is related to incorrect code generation management in the coverterCheckList function of the meta driver srv.js class. This can be exploited by a remote attacker t...

PT-2018-10954

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager version 1.6 Description The issue allows an attacker to perform a local file inclusion via directory traversal in the server/node upgrade srv.js. This is achieved by manipulating the firmware parameter in a...