Security Advisory

CVE-2018-12031

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-07 16:00:00
Last updated 2024-09-16 20:52:06
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware action.