CVE-2021-23283

Security issues in Eaton Intelligent Power Protector (IPP)

State: Published
Severity: 5.2 Medium
Published: Apr 19, 2022
Updated: Sep 17, 2024
Reserved: Jan 8, 2021

Description

Eaton Intelligent Power Protector (IPP) prior to version 1.69 is vulnerable to stored Cross Site Scripting. The vulnerability exists due to insufficient validation of user input and improper encoding of the output for certain resources within the IPP software.

Scores

CVSS	Score	Vector	Source
3.1	5.2 Medium	CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H	Eaton

Weaknesses

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

Product	Versions
Eaton Intelligent Power Protector (IPP)Eaton	before 1.69 release 166Affected

References

https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1001b_V1.0.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.