Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-6652

Incorrect privilege assignment allowing non-admin users to upload config files

Description

Incorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin users to upload the system configuration files by sending specially crafted requests. This can result in non-admin users manipulating the system configurations via uploading the configurations with incorrect parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eaton Intelligent Power manager (IPM)

  • unspecified to ≤ 1.67affected

References