CVE-2021-23282
Medium
Description
Eaton Intelligent Power Manager (IPM) prior to 1.70 is vulnerable to stored Cross site scripting. The vulnerability exists due to insufficient validation of input from certain resources by the IPM software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system
SeverityMedium
CVSS5.2
Exploit probability—
ProductIntelligent Power Manager (IPM)
PublishedNov 25, 2024
First seenNov 25, 2024
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- Eaton Intelligent Power Manager (IPM)1.70 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Eaton Intelligent Power Manager (IPM) | v < 1.70 | 1.70 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.