SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  Eaton Intelligent Power Manager Arbitrary File Deletion

Category: SCADA-ATTACKS      

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed.


Relevant Information