What’s Vulnerable › Products

Eaton Intelligent Power manager (IPM) vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Eaton Intelligent Power manager (IPM) version is affected

Latest Eaton Intelligent Power manager (IPM) vulnerabilities

• CVE-2021-23282 — Stored Cross-site Scripting reported in Intelligent Power Manager v1 (CVSS 5.2)
• CVE-2021-23286 — Security issues in Eaton Intelligent Power Manager Infrastructure (CVSS 8.0)
• CVE-2021-23285 — Security issues in Eaton Intelligent Power Manager Infrastructure (CVSS 4.8)
• CVE-2021-23287 — Security issues in Intelligent Power Manager (IPM 1) (CVSS 5.4)
• CVE-2021-23281 — Remote Code execution (CVSS 10.0)
• CVE-2021-23280 — Arbitrary File upload (CVSS 9.9)
• CVE-2021-23279 — Arbitrary File delete (CVSS 10.0)
• CVE-2021-23278 — Arbitrary File delete (CVSS 9.6)
• CVE-2021-23277 — Improper Neutralization of Directives in Dynamically Evaluated Code (CVSS 10.0)
• CVE-2021-23276 — Improper Neutralization of Special Elements used in an SQL Command (CVSS 8.8)
• CVE-2020-6652 — Incorrect privilege assignment allowing non-admin users to upload config files (CVSS 7.8)
• CVE-2020-6651 — Command injection via specially crafted file name during config file upload (CVSS 7.3)
• CVE-2018-12031 — (CVSS 9.8)