high7.1
CVE-2021-23276
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection.
Impact
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerability. Successful exploitation of this vulnerability can allow attackers to add users in the data base.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eaton | Intelligent Power Manager | before 1.69 |
| Eaton | Intelligent Power Manager Virtual Appliance | before 1.69 |
| Eaton | Intelligent Power Protector | before 1.68 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf
- https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf