CCyberPower

Products

Exploited and recent CVEs

• CVE-2024-31409 Medium 6.5 CyberPower PowerPanel business Incorrect Authorization 0.4%
• CVE-2024-31410 High 7.7 CyberPower PowerPanel business Use of Hard-coded Cryptographic Key 0.2%
• CVE-2024-31856 High 8.8 CyberPower PowerPanel business SQL Injection 0.5%
• CVE-2024-32042 Medium 4.9 CyberPower PowerPanel business Storing Passwords in a Recoverable Format 0.4%
• CVE-2024-32047 Critical 9.8 CyberPower PowerPanel business Active Debug Code 0.5%
• CVE-2024-32053 Critical 9.8 CyberPower PowerPanel business Use of Hard-coded Credentials 0.5%
• CVE-2024-33615 High 8.8 CyberPower PowerPanel business Relative Path Traversal 0.7%
• CVE-2024-33625 Critical 9.8 CyberPower PowerPanel business Use of Hard-coded Password 0.5%
• CVE-2024-34025 Critical 9.8 CyberPower PowerPanel business Use of Hard-coded Password 0.6%
• CVE-2024-32739 High 7.5 CyberPower PowerPanel Enterprise SQL Injection 5.4%
• CVE-2024-32738 High 7.5 CyberPower PowerPanel Enterprise SQL Injection 4.6%
• CVE-2024-32737 High 7.5 CyberPower PowerPanel Enterprise SQL Injection 5.4%
• CVE-2024-32736 High 7.5 CyberPower PowerPanel Enterprise SQL Injection 5.4%
• CVE-2024-32735 Critical 9.8 CyberPower PowerPanel Enterprise Missing Authentication 6.8%
• CVE-2023-3267 Critical 9.1 When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without sanitization into CMD running as NT/Authority Syst 1.8%
• CVE-2023-3266 Critical 9.8 A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentication is selected.An unauthenticated atta 0.9%
• CVE-2023-3265 Critical 9.8 An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an attacker to login into the application with the default user " 1.6%
• CVE-2023-25131 Critical 9.4 Use of default password vulnerability in CyberPower PowerPanel Business 1.0%
• CVE-2023-25132 Critical 9.1 Unrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel Business 1.1%
• CVE-2023-25133 Critical 9.1 Improper privilege management vulnerability in CyberPower PowerPanel Business 1.0%
• CVE-2023-25132 Critical 9.1 Unrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel Business 1.1%
• CVE-2023-25131 Critical 9.4 Use of default password vulnerability in CyberPower PowerPanel Business 1.0%
• CVE-2023-25133 Critical 9.1 Improper privilege management vulnerability in CyberPower PowerPanel Business 1.0%