VULNERABILITY INTELLIGENCE

CVE-2020-6651

CVSS score8.8 HIGH
EPSS probability2.15%
CISA KEVNot currently listed
Published2020-05-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Improper Input Validation in Eaton's Intelligent Power Manager (IPM) v 1.67 & prior on file name during configuration file import functionality allows attackers to perform command injection or code execution via specially crafted file names while uploading the configuration file in the application.

Weakness classification

  • CybersecurityCOE@eaton.com: CWE-20
  • nvd@nist.gov: CWE-20

Primary references