CVE-2020-6651 — Command injection via specially crafted file name during config file upload
Improper Input Validation in Eaton's Intelligent Power Manager (IPM) v 1.67 & prior on file name during configuration file import functionality allows attackers to perform comma…
Published: 2020-05-07 · CVSS: 8.8 · CVSS 3.1
Improper Input Validation in Eaton's Intelligent Power Manager (IPM) v 1.67 & prior on file name during configuration file import functionality allows attackers to perform command injection or code execution via specially crafted file names while uploading the configuration file in the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7