CVE-2021-23288 — Security issues in Intelligent Power Protector

Description (CNA)

The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.

Affected (CNA)

Vendor / product	Versions
Eaton / Intelligent Power Protector	affected unspecified before 1.69

CWE

CWE-79

References

https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1002b_V1.0.pdf

ADP enrichment

CVE

No English description supplied.

https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1002b_V1.0.pdf