CVE-2021-23280

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s mapssrv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious code or execute any command using a speciall...

PT-2021-15433

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager IPM versions prior to 1.69 Description The issue allows for authenticated arbitrary file upload. Specifically, the maps srv.js component is vulnerable, enabling an attacker to upload malicious NodeJS files using...

CVE-2021-23280

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s mapssrv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious code or execute any command using a speciall...