Intelligent Power Manager (Ipm)
Approved changes feed: RSS · Atom
cpe:2.3:a:eaton:intelligent_power_manager_(ipm):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Eaton (b7450635-db8f-5426-bd84-6f4be38222d9) |
|---|---|
| Product | Intelligent Power Manager (Ipm) (935c8aba-939e-5de6-b903-62832e3f61de) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-23282 |
vulnerable | 2026-06-08 05:30:02.652730 |
Stored Cross-site Scripting reported in Intelligent Power Manager v1
MEDIUM (5.2)
Eaton Intelligent Power Manager (IPM) prior to 1.70 is vulnerable to stored Cross site scripting. The
vulnerability exists due to insufficient validation of input from certain resources by the IPM software.
The attacker would need access to the local Subnet and an administrator interaction to compromise
the system
Published: 2024-11-25T08:36:19.141Z
Updated: 2024-11-25T13:57:58.441Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23281 |
vulnerable | 2026-06-08 05:30:02.652416 |
Remote Code execution
CRITICAL (10)
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in meta_driver_srv.js class. Attackers can send a specially crafted packet to make IPM connect to rouge SNMP server and execute attacker-controlled code.
Published: 2021-04-13T18:03:54.932Z
Updated: 2024-09-17T02:41:57.724Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23280 |
vulnerable | 2026-06-08 05:30:02.652015 |
Arbitrary File upload
HIGH (8)
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious code or execute any command using a specially crafted packet to exploit the vulnerability.
Published: 2021-04-13T18:04:34.985Z
Updated: 2024-09-16T17:24:07.762Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23279 |
vulnerable | 2026-06-08 05:30:02.651605 |
Arbitrary File delete
HIGH (8)
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed.
Published: 2021-04-13T18:03:26.395Z
Updated: 2024-09-16T17:18:54.414Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23278 |
vulnerable | 2026-06-08 05:30:02.651190 |
Arbitrary File delete
HIGH (8.7)
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/maps_srv.js with action removeBackground and server/node_upgrade_srv.js with action removeFirmware. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed.
Published: 2021-04-13T18:02:51.932Z
Updated: 2024-09-16T20:11:36.112Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23277 |
vulnerable | 2026-06-08 05:30:02.650729 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23276 |
vulnerable | 2026-06-08 05:30:02.648701 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6652 |
vulnerable | 2026-06-08 05:26:45.607099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6651 |
vulnerable | 2026-06-08 05:26:45.605889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.