Lucene search

EatonCVELIST:CVE-2021-23284

HistoryApr 18, 2022 - 4:20 p.m.

CVE-2021-23284 Security issues in Eaton Intelligent Power Manager Infrastructure

2022-04-1816:20:32

CWE-79

Eaton

www.cve.org

eaton ipm infrastructure

1.5.0plus205

stored xss

CVSS3

5.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H

EPSS

0.001

Percentile

22.7%

JSON

Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions.

CNA Affected

[
  {
    "product": "Intelligent Power Manager Infrastructure (IPM Infrastructure)",
    "vendor": "Eaton",
    "versions": [
      {
        "lessThanOrEqual": "1.5.0plus205",
        "status": "affected",
        "version": "all",
        "versionType": "custom"
      }
    ]
  }
]

References

www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-%28IPM%29-Infrastructure-Vulnerability-Advisory_1001c_V1.0.pdf

www.eaton.com/content/dam/eaton/products/backup-power-ups-surge-it-power-distribution/power-management-software-connectivity/eaton-intelligent-power-manager/software/ipm-understand-edition-emea/eaton-ipminfra-eolmemo-en-us.pdf.

CVSS3

5.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H

EPSS

0.001

Percentile

22.7%

JSON

Related for CVELIST:CVE-2021-23284