CVE-2021-23287: Security issues in Intelligent Power Manager (IPM 1)

Q: What is CVE-2021-23287?

CVE-2021-23287 is a vulnerability that exists due to insufficient validation of input of certain resources within the IPM software.

Q: Which software versions are affected by CVE-2021-23287?

CVE-2021-23287 affects Intelligent Power Manager (IPM 1) versions prior to 1.70.

Q: What is the severity of CVE-2021-23287?

CVE-2021-23287 has a severity rating of medium with a CVSS score of 5.4.

Q: How can I fix CVE-2021-23287?

To fix CVE-2021-23287, it is recommended to upgrade Intelligent Power Manager (IPM 1) to version 1.70 or higher.

Q: Where can I find more information about CVE-2021-23287?

More information about CVE-2021-23287 can be found in the security advisory provided by Eaton: [link](https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-Vulnerability-Advisory_1002a_V1.0.pdf).

Published Apr 1, 2022

Updated

The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issue affects: Intelligent Power Manager (IPM 1) versions prior to 1.70.

Affected Software

1 affected component

Eaton Intelligent Power Manager<1.70

Remediation

Patch Available

https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-Vulnerability-Advisory_1002a_V1.0.pdf

Information

Eaton has patched these security issues and new versions of the affected software are released. The latest versions can be downloaded from below location: - Eaton IPM v1.70 – https://www.eaton.com/us/en-us/digital/brightlayer/brightlayer-data-centers-suite/disaster-avoidance-software.html

Event History

Apr 1, 2022

CVE Published

via MITRE·10:17 PM

Data Sourced

via MITRE·10:17 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-23287?