.. / CVE-2018-12031

Exploit for Eaton Intelligent Power Manager 1.6 - Directory Traversal (CVE-2018-12031)

Description:

Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution.

Nuclei Template

View the template here CVE-2018-12031.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-12031.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2018-12031
https://github.com/ARPSyndicate/cvemon
https://github.com/EmreOvunc/Eaton-Intelligent-Power-Manager-Local-File-Inclusion
https://github.com/0xT11/CVE-POC
https://www.exploit-db.com/exploits/48614