VULNERABILITY INTELLIGENCE

CVE-2021-23288

CVSS score5.6 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2022-04-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H

Description

The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.

Weakness classification

  • CybersecurityCOE@eaton.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references