Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious code or execute any command using a specially crafted packet to exploit the vulnerability.
oryginał ENCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:HEaton Intelligent Power Manager
APPEaton< 1.69Eaton Intelligent Power Manager Virtual Appliance
APPEaton< 1.69Eaton Intelligent Power Protector
APPEaton< 1.68
Powiązane podatności
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vul...
Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/n...
Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could...
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulne...
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerabil...