← CVE Intelligence

CVE-2021-23276

Improper Neutralization of Special Elements used in an SQL Command PUBLISHED

Description (CNA)

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerability. Successful exploitation of this vulnerability can allow attackers to add users in the data base.

Affected (CNA)

Vendor / productVersions
Eaton / Intelligent Power manager (IPM)affected unspecified before 1.69

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.