CVE-2020-6652: Eaton Intelligent Power Manager

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Incorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin users to upload the system configuration files by sending specially crafted requests. This can result in non-admin users manipulating the system configurations via uploading the configurations with incorrect parameters.

Affected products

• Eaton Intelligent Power Manager: up to and including 1.67

Published 2020-05-07. Last modified 2026-06-17.