cve.bz

CVE-2020-6651

7.3 highEPSS 2.1%

High (7.3) in eaton intelligent power manager. EPSS 2.1% chance of exploitation in the next 30 days.

Improper Input Validation in Eaton's Intelligent Power Manager (IPM) v 1.67 & prior on file name during configuration file import functionality allows attackers to perform command injection or code execution via specially crafted file names while uploading the configuration file in the application.

Severity

CVSS 3.1

7.3 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
2.1% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWEs
CWE-20, CWE-78
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON