Security Advisory

CVE-2021-23279

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-04-13 18:03:26

Last updated 2024-09-16 17:18:54

Assigner Eaton

State PUBLISHED

Description

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed.

← Browse all CVEs View on cve.org ↗