CVEvulnerability

CVE-2021-23288

4.8 MEDIUM Published 2022-04-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.6 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H
CVSS 3.1 ([email protected])
4.8 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
2.3 LOW — AV:A/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-79

Description

The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.

Affected configurations

• eaton intelligent power protector (< 1.69)

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References