MIRAGE
Threat IntelligenceCVEs › CVE-2018-12031

CVE-2018-12031 — exposed on the internet

Internet exposure observed by OffSeq scans · last 30 days

7
Exposed hosts
9.8
CVSS
19.8%
EPSS

Found on 7 internet-exposed hosts by OffSeq scans; no in-the-wild exploitation has been observed against OffSeq honeypots in this window.

About CVE-2018-12031

Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware action.

CWE-22

OffSeq internet scanning found CVE-2018-12031 on 7 exposed hosts in the last 30 days. OffSeq honeypots have not recorded in-the-wild exploitation of this CVE in the current window — this page tracks its exposure footprint and status; if exploitation begins, the live honeypot signal will appear here.

Exposed-host countries

Exposed via

grafana http

Open the live CVE-2018-12031 view →

References