Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/maps_srv.js with action removeBackground and server/node_upgrade_srv.js with action removeFirmware. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Intelligent_power_manager | Eaton | * | 1.69 (excluding) |
| Intelligent_power_manager_virtual_appliance | Eaton | * | 1.69 (excluding) |
| Intelligent_power_protector | Eaton | * | 1.68 (excluding) |