Summary
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code using untrusted data.
Vulnerabilities 1
-
Medium 5.2
Security issues in Eaton Intelligent Power Protector (IPP)
Eaton Intelligent Power Protector (IPP) prior to version 1.69 is vulnerable to stored Cross Site Scripting. The vulnerability exists due to insufficient validation of user input and improper encoding of the output for certain resources within the IPP software.
Revision history
-
#1
ICSA-22-130-02 Eaton Intelligent Power Protector
References
-
ICS Advisory ICSA-22-130-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-130-02
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
-
Recommended Practices
https://www.cisa.gov/uscert/ncas/tips/ST04-014