Eaton Intelligent Power Manager (IPM)

• CVE-2021-23282 Medium 5.2 Stored Cross-site Scripting reported in Intelligent Power Manager v1 8.3%
• CVE-2021-23280 High 8.0 Arbitrary File upload 0.9%
• CVE-2021-23277 High 8.3 Improper Neutralization of Directives in Dynamically Evaluated Code 1.0%
• CVE-2021-23281 Critical 10.0 Remote Code execution 2.3%
• CVE-2021-23279 High 8.0 Arbitrary File delete 27.9%
• CVE-2021-23276 High 7.1 Improper Neutralization of Special Elements used in an SQL Command 0.8%
• CVE-2021-23278 High 8.7 Arbitrary File delete 1.1%
• CVE-2020-6651 High 8.8 Command injection via specially crafted file name during config file upload 2.1%
• CVE-2020-6652 High 7.8 Incorrect privilege assignment allowing non-admin users to upload config files 0.4%