Description (CNA)
Incorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin users to upload the system configuration files by sending specially crafted requests. This can result in non-admin users manipulating the system configurations via uploading the configurations with incorrect parameters.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Eaton / Intelligent Power manager (IPM) | affected unspecified through 1.67 |
CWE
CWE-266
References
- https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-vulnerability-advisory-intelligent-power-manager-v1-1.pdf
- https://www.zerodayinitiative.com/advisories/ZDI-20-650/
ADP enrichment
No English description supplied.