EmreOvunc/Eaton-Intelligent-Power-Manager-Local-File-Inclusion

EmreOvunc/Eaton-Intelligent-Power-Manager-Local-File-Inclusion

GitHubGitHub
GitHubgithub.com
Releases0
Stars4
CVE-2018-12031 | LFI in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file, it can lead to sensitive information disclosure, denial of service and code execution.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-12031↗
—7.5 HIGH

Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware action.