CVE-2021-23276 — Improper Neutralization of Special Elements used in an SQL Command
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerabili…
Published: 2021-04-13 · CVSS: 7.1 · CVSS 3.1
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerability. Successful exploitation of this vulnerability can allow attackers to add users in the data base.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7