← Back to home
ICSA-20-133-01  ·  Published 2020-05-12  ·  View on CISA ICS-CERT ↗

Eaton Intelligent Power Manager

CVSS 8.8 HIGH

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to perform command injection or code execution and allow non-administrator users to manipulate the system configurations.

Remediations

  • Eaton has released Intelligent Power Manager v1.68 to address the reported vulnerabilities.
  • To prevent the exploitation of the issues and safeguard the software from malicious entities, Eaton recommends blocking Ports 4679 and 4680 at the enterprise network or home network where Intelligent Power Manager software is installed and used.
  • For additional information please see the Eaton Vulnerability Advisory.

Affected Vendors

Eaton

Affected Products (1)

Eaton · Intelligent Power Manager <= 1.67

Affected Sectors

Energy

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more