Skip to content
Noroxi

voltronicpower records

25 published records for vendor voltronicpower.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
15
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

25 records
  • CVE-2023-51595
    53Plan

    Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 48%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51573
    53Plan

    Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability

    CriticalCVSS 9.8No exploitEPSS 45%

    voltronicpower · viewpowerApr 1, 2024

  • CVE-2023-51572
    51Plan

    Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 38%

    voltronicpower · viewpowerApr 1, 2024

  • CVE-2023-51587
    41Plan

    Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability

    HighCVSS 7.5No exploitEPSS 36%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51593
    39Monitor

    Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51574
    39Monitor

    Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51576
    39Monitor

    Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51581
    39Monitor

    Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51590
    39Monitor

    Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51575
    39Monitor

    Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51583
    39Monitor

    Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51582
    39Monitor

    Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51586
    39Monitor

    Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-39073
    39Monitor

    An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request.

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · snmp web proSep 12, 2023

  • CVE-2023-33274
    39Monitor

    The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access C

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · snmp web proJul 12, 2023

  • CVE-2023-51570
    39Monitor

    Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerApr 1, 2024

  • CVE-2023-51585
    35Monitor

    Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51584
    35Monitor

    Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51577
    31Monitor

    Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51579
    31Monitor

    Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51588
    31Monitor

    Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51578
    30Monitor

    Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51591
    30Monitor

    Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51571
    30Monitor

    Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    voltronicpower · viewpowerApr 1, 2024

  • CVE-2023-49563
    24Monitor

    Cross Site Scripting (XSS) in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a

    MediumCVSS 6.1No exploitEPSS 0%

    voltronicpower · snmp web proDec 12, 2023