{"cve":"CVE-2018-12031","epss":{"score":0.19762},"mitre":{"cpes":[],"created":"2018-06-07T16:00:00+00:00","description":"Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware action.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2018/12xxx/CVE-2018-12031.json","references":["https://github.com/EmreOvunc/Eaton-Intelligent-Power-Manager-Local-File-Inclusion"],"title":null,"updated":"2024-09-16T20:52:06.495000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:a:eaton:intelligent_power_manager:1.6:*:*:*:*:*:*:*"],"created":"2018-06-07T16:29:00.520000+00:00","description":"Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware action.","metrics":{"cvssV2_0":{"score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},"cvssV3_0":{"score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cvssV3_1":{},"cvssV4_0":{}},"nvd_repo_path":"2018/CVE-2018-12031.json","references":["https://github.com/EmreOvunc/Eaton-Intelligent-Power-Manager-Local-File-Inclusion"],"title":null,"updated":"2026-06-17T01:37:02.223000+00:00","vendors":["eaton","eaton$PRODUCT$intelligent_power_manager"],"weaknesses":["CWE-22"]},"opencve":{"changes":[],"cpes":{"data":["cpe:2.3:a:eaton:intelligent_power_manager:1.6:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2018-06-07T16:00:00+00:00","provider":"mitre"},"description":{"data":"Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware action.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{"score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},"provider":"nvd"},"cvssV3_0":{"data":{"score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"provider":"nvd"},"cvssV3_1":{"data":{},"provider":null},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.19762},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://github.com/EmreOvunc/Eaton-Intelligent-Power-Manager-Local-File-Inclusion"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2024-11-21T03:44:27.427000+00:00","provider":"nvd"},"vendors":{"data":["eaton","eaton$PRODUCT$intelligent_power_manager"],"providers":["nvd"]},"weaknesses":{"data":["CWE-22"],"providers":["nvd"]}}}