Intelligent Power Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:eaton:intelligent_power_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Eaton (b7450635-db8f-5426-bd84-6f4be38222d9) |
|---|---|
| Product | Intelligent Power Manager (524ba91b-0fc2-507d-9be1-563c9ab0cb0c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-23287 |
vulnerable | 2026-06-08 05:30:02.661229 |
Security issues in Intelligent Power Manager (IPM 1)
MEDIUM (5.6)
The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issue affects: Intelligent Power Manager (IPM 1) versions prior to 1.70.
Published: 2022-04-01T22:17:33.721Z
Updated: 2024-09-16T20:59:12.709Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23286 |
vulnerable | 2026-06-08 05:30:02.659742 |
Security issues in Eaton Intelligent Power Manager Infrastructure
MEDIUM (5.7)
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions.
Published: 2022-04-18T16:20:33.351Z
Updated: 2024-09-17T00:41:59.713Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23285 |
vulnerable | 2026-06-08 05:30:02.659333 |
Security issues in Eaton Intelligent Power Manager Infrastructure
LOW (3.1)
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions.
Published: 2022-04-18T16:20:31.667Z
Updated: 2024-09-16T22:41:39.422Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23281 |
vulnerable | 2026-06-08 05:30:02.652447 |
Remote Code execution
CRITICAL (10)
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in meta_driver_srv.js class. Attackers can send a specially crafted packet to make IPM connect to rouge SNMP server and execute attacker-controlled code.
Published: 2021-04-13T18:03:54.932Z
Updated: 2024-09-17T02:41:57.724Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23280 |
vulnerable | 2026-06-08 05:30:02.652049 |
Arbitrary File upload
HIGH (8)
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious code or execute any command using a specially crafted packet to exploit the vulnerability.
Published: 2021-04-13T18:04:34.985Z
Updated: 2024-09-16T17:24:07.762Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23279 |
vulnerable | 2026-06-08 05:30:02.651635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23278 |
vulnerable | 2026-06-08 05:30:02.651223 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23277 |
vulnerable | 2026-06-08 05:30:02.650770 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23276 |
vulnerable | 2026-06-08 05:30:02.649249 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6652 |
vulnerable | 2026-06-08 05:26:45.607236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6651 |
vulnerable | 2026-06-08 05:26:45.606664 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.