CVE-2021-23288: medium-severity vulnerability in Eaton Intelligent Power Protector
Security issues in Intelligent Power Protector
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.6epss 0.3%
The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H
Affected products
Eaton · Intelligent Power ProtectorRelated CVEs — Eaton Intelligent Power Protector
In the same product, most dangerous first.