Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed.
oryginał ENCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:HEaton Intelligent Power Manager
APPEaton< 1.69Eaton Intelligent Power Manager Virtual Appliance
APPEaton< 1.69Eaton Intelligent Power Protector
APPEaton< 1.68
Powiązane podatności
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vul...
Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/n...
Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could...
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulne...
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerabil...