CVE-2021-23283 — Security issues in Eaton Intelligent Power Protector (IPP)

Description (CNA)

Eaton Intelligent Power Protector (IPP) prior to version 1.69 is vulnerable to stored Cross Site Scripting. The vulnerability exists due to insufficient validation of user input and improper encoding of the output for certain resources within the IPP software.

Affected (CNA)

Vendor / product	Versions
Eaton / Eaton Intelligent Power Protector (IPP)	affected unspecified before 1.69 release 166

CWE

CWE-79

References

https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1001b_V1.0.pdf

ADP enrichment

CVE

No English description supplied.

https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1001b_V1.0.pdf