CVE-2021-23288CWE-79
Security issues in Intelligent Power Protector
Medium · published April 1, 2022
What it is
The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.
The record
Technical detail
- CVSS v3.1
- 5.6 · MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00288 · 20.3th percentile
- Weakness
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Published
- 2022-04-01T22:17Z
EPSS history
Timeline