Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h7cg-8375-67fx

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed.

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed.

EPSS

Процентиль: 75%
0.00914
Низкий

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8
nvd
почти 5 лет назад

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed.

EPSS

Процентиль: 75%
0.00914
Низкий

Дефекты

CWE-20