CVE-2021-23285: Security issues in Eaton Intelligent Power Manager Infrastructure

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2021-23285.

Q: What is the severity of CVE-2021-23285?

The severity of CVE-2021-23285 is medium with a CVSS score of 4.8.

Q: What is the affected software?

The affected software is Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions.

Q: What is the impact of this vulnerability?

This vulnerability could allow an attacker to execute arbitrary script code in the victim's browser, potentially leading to unauthorized access or data theft.

Q: How can I fix CVE-2021-23285?

To fix CVE-2021-23285, it is recommended to upgrade to a patched version of Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure).

Published Apr 18, 2022

Updated

Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions.

Affected Software

1 affected component

Eaton Intelligent Power Manager<=1.5.0plus205

Remediation

Information

The product has reached its End Of Life, the notification has been posted at: Lifecycle Notification: The transition to IPM Monitor Edition is in progress. Refer the Product page for further details.

Event History

Apr 18, 2022

CVE Published

via MITRE·04:20 PM

Data Sourced

via MITRE·04:20 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2021-23285.

What is the severity of CVE-2021-23285?