ZDI-CAN-11085: Eaton Intelligent Power Manager mc2 Incorrect Privilege Assignment Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of Eaton Intelligent Power Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the mc2 binary. The issue results from the lack of proper validation of user privileges prior to performing privileged actions. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from non-admin users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-11085?
ZDI-CAN-11085 has a high severity rating due to its potential for privilege escalation.
How do I fix ZDI-CAN-11085?
To mitigate ZDI-CAN-11085, update the Eaton Intelligent Power Manager to the latest version provided by the vendor.
Is authentication required to exploit ZDI-CAN-11085?
Yes, authentication is required to exploit the vulnerability identified as ZDI-CAN-11085.
What types of attacks can ZDI-CAN-11085 facilitate?
ZDI-CAN-11085 can facilitate remote attacks that escalate privileges on affected Eaton Intelligent Power Manager installations.
Which software is affected by ZDI-CAN-11085?
Eaton Intelligent Power Manager is the affected software associated with vulnerability ZDI-CAN-11085.