← CVE Intelligence

CVE-2021-23280

Arbitrary File upload PUBLISHED

Description (CNA)

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious code or execute any command using a specially crafted packet to exploit the vulnerability.

Affected (CNA)

Vendor / productVersions
Eaton / Intelligent Power manager (IPM)affected unspecified before 1.69

CWE

CWE-434

References

ADP enrichment

CVE

No English description supplied.