CVE-2021-23286
Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions.
- Score
- CVSS 3.1 8.0 High
- Status
- Modified - CybersecurityCOE@eaton.com
- Published
- 2022-04-18
- Last modified
- 2024-09-17
- Weaknesses
- CWE-1236
Affected products
- Intelligent Power Manager (Eaton)
- Intelligent Power Manager Infrastructure Ipm Infrastructure (Eaton)
References
- https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-…
- https://www.eaton.com/content/dam/eaton/products/backup-power-ups-surge-it-power-distribution/power-management-software…
