漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Unrestricted file upload in Eaton Foreseer EPMS
Vulnerability Description
A security vulnerability was discovered in the Eaton Foreseer EPMS software. Foreseer EPMS connects an operation’s vast array of devices to assist in the reduction of energy consumption and avoid unplanned downtime caused by the failures of critical systems. A threat actor may upload arbitrary files using the file upload feature. This vulnerability is present in versions 4.x, 5.x, 6.x & 7.0 to 7.5. A new version (v7.6) containing the remediation has been made available by Eaton and a mitigation has been provided for the affected versions that are currently supported. Customers are advised to update the software to the latest version (v7.6). Foreseer EPMS versions 4.x, 5.x, 6.x are no longer supported by Eaton. Please refer to the End-of-Support notification https://www.eaton.com/in/en-us/catalog/services/foreseer/foreseer-legacy.html .
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Eaton Foreseer EPMS 代码问题漏洞
Vulnerability Description
Eaton Foreseer EPMS是美国伊顿（Eaton）公司的一个高度可定制的基于 web 的软件平台。 Eaton Foreseer EPMS v7.6之前版本存在代码问题漏洞，该漏洞源于恶意攻击者可以使用文件上传特性上传任意文件。
CVSS Information
N/A
Vulnerability Type
N/A