AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-23277

HIGH · CVSS 8.3 EPSS 0.96% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-04-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2021-23277
Severity
HIGH
CVSS
8.3
EPSS
0.96%

Original NVD Description

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before using in the dynamic evaluation call in loadUserFile function under scripts/libs/utils.js. Successful exploitation can allow attackers to control the input to the function and execute attacker controlled commands.