{"id":"CVE-2021-23288","aliases":["EUVD-2021-10383","GHSA-qvvf-x5v8-3hvv"],"status":"published","title":"Security issues in Intelligent Power Protector","description":"The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.","severity":{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00288,"percentile":0.21586,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2022-04-01T22:17:34Z","modified":"2026-06-17T03:38:33Z","products":[{"vendor":"eaton","product":"intelligent power protector"},{"vendor":"eaton","product":"intelligent_power_protector"}],"references":[{"url":"https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1002b_V1.0.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23288"},{"url":"https://github.com/advisories/GHSA-qvvf-x5v8-3hvv"}],"sources":{"cve":[{"id":"CVE-2021-23288","title":"Security issues in Intelligent Power Protector","description":"The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.","status":"published","published":"2022-04-01T22:17:34.614Z","modified":"2024-09-16T19:14:44.585Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:33:00.819444Z"}],"euvd":[{"id":"EUVD-2021-10383","description":"The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.","status":"published","published":"2022-04-01T22:17:34Z","modified":"2024-09-16T19:14:44Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:55:24.732716Z"}],"ghsa":[{"id":"GHSA-qvvf-x5v8-3hvv","title":"The vulnerability exists due to insufficient validation of input from certain resources by the...","description":"The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.","status":"published","published":"2022-04-03T00:01:03Z","modified":"2023-01-27T05:01:17Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:41:51.63425Z"}],"nvd":[{"id":"CVE-2021-23288","description":"The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.","status":"published","published":"2022-04-01T23:15:08.997Z","modified":"2026-06-17T03:38:33.593Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.3,"vector":"AV:A/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:05.581807Z"}]}}