Vendor CVEs

Voltronicpower

All CVEs

25 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-51595	Voltronic Power ViewPower	Cri	0.68	9.8	0.48	May 3, 2024	Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…
CVE-2023-51573	Voltronic Power ViewPower	Cri	0.67	9.8	0.46	Apr 1, 2024	Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to…
CVE-2023-51572	Voltronic Power ViewPower	Cri	0.67	9.8	0.38	Apr 1, 2024	Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…
CVE-2023-51593	Voltronic Power ViewPower	Cri	0.64	9.8	0.02	May 3, 2024	Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…
CVE-2023-51590	Voltronic Power ViewPower	Cri	0.64	9.8	0.01	May 3, 2024	Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit…
CVE-2023-51586	Voltronic Power ViewPower	Cri	0.64	9.8	0.01	May 3, 2024	Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…
CVE-2023-51583	Voltronic Power ViewPower	Cri	0.64	9.8	0.01	May 3, 2024	Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…
CVE-2023-51582	Voltronic Power ViewPower LinuxMonitorConsole	Cri	0.64	9.8	0.01	May 3, 2024	Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…
CVE-2023-51581	Voltronic Power ViewPower	Cri	0.64	9.8	0.01	May 3, 2024	Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…
CVE-2023-51576	Voltronic Power ViewPower	Cri	0.64	9.8	0.02	May 3, 2024	Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…
CVE-2023-51575	Voltronic Power ViewPower MonitorConsole	Cri	0.64	9.8	0.01	May 3, 2024	Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…
CVE-2023-51574	Voltronic Power ViewPower	Cri	0.64	9.8	0.02	May 3, 2024	Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit…
CVE-2023-51570	Voltronic Power ViewPower	Cri	0.64	9.8	0.01	Apr 1, 2024	Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…
CVE-2023-39073	SNMP Web Pro SNMP Web Pro	Cri	0.64	9.8	0.01	Sep 12, 2023	An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request.
CVE-2023-33274	PowerShield SNMP Web Pro	Cri	0.64	9.8	0.01	Jul 12, 2023	The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface (CGI) scripts without proper identification or authorization. This vulnerability arises from a lack of proper…
CVE-2023-51585	Voltronic Power ViewPower	Hig	0.57	8.8	0.01	May 3, 2024	Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit this…
CVE-2023-51584	Voltronic Power ViewPower	Hig	0.57	8.8	0.01	May 3, 2024	Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit…
CVE-2023-51587	Voltronic Power ViewPower	Hig	0.52	7.5	0.36	May 3, 2024	Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit…
CVE-2023-51588	Voltronic Power ViewPower	Hig	0.51	7.8	0.00	May 3, 2024	Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obtain the ability to…
CVE-2023-51579	Voltronic Power ViewPower	Hig	0.51	7.8	0.00	May 3, 2024	Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute…
CVE-2023-51577	Voltronic Power ViewPower	Hig	0.51	7.8	0.00	May 3, 2024	Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute…
CVE-2023-51591	Voltronic Power ViewPower	Hig	0.49	7.5	0.01	May 3, 2024	Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower Pro. Authentication is not required…
CVE-2023-51578	Voltronic Power ViewPower	Hig	0.49	7.5	0.01	May 3, 2024	Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit…
CVE-2023-51571	Voltronic Power ViewPower	Hig	0.49	7.5	0.01	Apr 1, 2024	Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to…
CVE-2023-49563	Voltronic Power SNMP Web Pro	Med	0.40	6.1	0.01	Dec 12, 2023	Cross Site Scripting (XSS) in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver.

CVE-2023-51595CriMay 3, 2024
Voltronic Power
ViewPower
risk 0.68cvss 9.8epss 0.48
Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…
CVE-2023-51573CriApr 1, 2024
Voltronic Power
ViewPower
risk 0.67cvss 9.8epss 0.46
Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to…
CVE-2023-51572CriApr 1, 2024
Voltronic Power
ViewPower
risk 0.67cvss 9.8epss 0.38
Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…
CVE-2023-51593CriMay 3, 2024
Voltronic Power
ViewPower
risk 0.64cvss 9.8epss 0.02
Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…
CVE-2023-51590CriMay 3, 2024
Voltronic Power
ViewPower
risk 0.64cvss 9.8epss 0.01
Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit…
CVE-2023-51586CriMay 3, 2024
Voltronic Power
ViewPower
risk 0.64cvss 9.8epss 0.01
Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…
CVE-2023-51583CriMay 3, 2024
Voltronic Power
ViewPower
risk 0.64cvss 9.8epss 0.01
Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…
CVE-2023-51582CriMay 3, 2024
Voltronic Power
ViewPower LinuxMonitorConsole
risk 0.64cvss 9.8epss 0.01
Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…
CVE-2023-51581CriMay 3, 2024
Voltronic Power
ViewPower
risk 0.64cvss 9.8epss 0.01
Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…
CVE-2023-51576CriMay 3, 2024
Voltronic Power
ViewPower
risk 0.64cvss 9.8epss 0.02
Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…
CVE-2023-51575CriMay 3, 2024
Voltronic Power
ViewPower MonitorConsole
risk 0.64cvss 9.8epss 0.01
Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…
CVE-2023-51574CriMay 3, 2024
Voltronic Power
ViewPower
risk 0.64cvss 9.8epss 0.02
Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit…
CVE-2023-51570CriApr 1, 2024
Voltronic Power
ViewPower
risk 0.64cvss 9.8epss 0.01
Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…
CVE-2023-39073CriSep 12, 2023
SNMP Web Pro
SNMP Web Pro
risk 0.64cvss 9.8epss 0.01
An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request.
CVE-2023-33274CriJul 12, 2023
PowerShield
SNMP Web Pro
risk 0.64cvss 9.8epss 0.01
The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface (CGI) scripts without proper identification or authorization. This vulnerability arises from a lack of proper…
CVE-2023-51585HigMay 3, 2024
Voltronic Power
ViewPower
risk 0.57cvss 8.8epss 0.01
Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit this…
CVE-2023-51584HigMay 3, 2024
Voltronic Power
ViewPower
risk 0.57cvss 8.8epss 0.01
Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit…
CVE-2023-51587HigMay 3, 2024
Voltronic Power
ViewPower
risk 0.52cvss 7.5epss 0.36
Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit…
CVE-2023-51588HigMay 3, 2024
Voltronic Power
ViewPower
risk 0.51cvss 7.8epss 0.00
Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obtain the ability to…
CVE-2023-51579HigMay 3, 2024
Voltronic Power
ViewPower
risk 0.51cvss 7.8epss 0.00
Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute…
CVE-2023-51577HigMay 3, 2024
Voltronic Power
ViewPower
risk 0.51cvss 7.8epss 0.00
Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute…
CVE-2023-51591HigMay 3, 2024
Voltronic Power
ViewPower
risk 0.49cvss 7.5epss 0.01
Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower Pro. Authentication is not required…
CVE-2023-51578HigMay 3, 2024
Voltronic Power
ViewPower
risk 0.49cvss 7.5epss 0.01
Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit…
CVE-2023-51571HigApr 1, 2024
Voltronic Power
ViewPower
risk 0.49cvss 7.5epss 0.01
Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to…
CVE-2023-49563MedDec 12, 2023
Voltronic Power
SNMP Web Pro
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting (XSS) in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver.