medium5.6

CVE-2021-23287

The vulnerability exists due to insufficient validation of input of certain resources within the IPM software.

Impact

The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issue affects: Intelligent Power Manager (IPM 1) versions prior to 1.70.

Affected products

Vendor	Product	Affected versions
Eaton	Intelligent Power Manager	before 1.70

Weakness classification

CWE-79

References

NVD record
CVE.org record
https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-Vulnerability-Advisory_1002a_V1.0.pdf
https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-Vulnerability-Advisory_1002a_V1.0.pdf