medium5.6

CVE-2021-23288

The vulnerability exists due to insufficient validation of input from certain resources by the IPP software.

Impact

The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.

Affected products

Vendor	Product	Affected versions
Eaton	Intelligent Power Protector	before 1.69

Weakness classification

CWE-79

References

NVD record
CVE.org record
https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1002b_V1.0.pdf
https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1002b_V1.0.pdf