CVE-2021-23286CWE-1236

Security issues in Eaton Intelligent Power Manager Infrastructure

Medium · published April 18, 2022

CVSS v3.1
5.7
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00419 · 35.1th percentile
Weakness
CWE-1236 · Improper Neutralization of Formula Elements in a CSV File
Published
2022-04-18T16:20Z
EPSS history
Timeline
  • 18 APR 16:20Z
    Security issues in Eaton Intelligent Power Manager Infrastructure
    cvelistv5