Skip to content
OpenAdvisories
Medium ICSA-22-130-03 3 CVEs

Eaton Intelligent Power Manager Infrastructure

Published May 10, 2022 · Updated May 10, 2022

Vendor: Eaton Product: Intelligent Power Manager Infrastructure (IPM Infrastructure)

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code using untrusted data.

Vulnerabilities 3

  • Medium 5.7
    CVE-2021-23284

    Security issues in Eaton Intelligent Power Manager Infrastructure

    Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure…

    Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure)
  • Medium 5.7
    CVE-2021-23286

    Security issues in Eaton Intelligent Power Manager Infrastructure

    Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0p…

    Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure)
  • Low 3.1
    CVE-2021-23285

    Security issues in Eaton Intelligent Power Manager Infrastructure

    Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastruct…

    Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure)

Revision history

  1. #1

    ICSA-22-130-03 Eaton Intelligent Power Manager Infrastructure

References