Vulnerability · Published Aug 14, 2023 · Assigned by trellix

CVE-2023-3267

Critical 9.1

In plain English

A critical-severity OS command injection in PowerPanel Enterprise from CyberPower. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 78% of all known vulnerabilities).

Severity (CVSS 3.1)9.1Critical

Exploit odds (30 days)1.8%top 22.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without sanitization into CMD running as NT/Authority System. An authenticated attacker can leverage this vulnerability to execute arbitrary code with system-level access to the CyberPower PowerPanel Enterprise server.

Affected products (as reported)

Vendor	Product	Versions
CyberPower	PowerPanel Enterprise	v2.6.0

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html