CyberPower kayıtları
cyberpower üreticisine ait 23 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-798 Use of Hard-coded Credentials2
- CWE-259 Use of Hard-coded Password2
- CWE-257 Storing Passwords in a Recoverable Format1
- CWE-269 Improper Privilege Management1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
23 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2024-32735Kavram kanıtı | CyberPower PowerPanel Enterprise Missing Authenticationcyberpower · powerpanel · CWE-306 | Kritik9,8 | — | %6,7 | 14 May 2024 |
39İzleyin | CVE-2023-3265İstismar yok | An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an atcyberpower · powerpanel server · CWE-150 | Kritik9,8 | — | %1,6 | 14 Ağu 2023 |
39İzleyin | CVE-2023-25132İstismar yok | Unrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel Businesscyberpower · powerpanel · CWE-434 | Kritik9,8 | — | %1,1 | 24 Nis 2023 |
39İzleyin | CVE-2023-25133İstismar yok | Improper privilege management vulnerability in CyberPower PowerPanel Businesscyberpower · powerpanel · CWE-269 | Kritik9,8 | — | %1,0 | 24 Nis 2023 |
39İzleyin | CVE-2023-25131İstismar yok | Use of default password vulnerability in CyberPower PowerPanel Businesscyberpower · powerpanel · CWE-1393 | Kritik9,8 | — | %0,9 | 24 Nis 2023 |
39İzleyin | CVE-2023-3266İstismar yok | A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checkcyberpower · powerpanel server · CWE-358 | Kritik9,8 | — | %0,8 | 14 Ağu 2023 |
39İzleyin | CVE-2024-34025İstismar yok | CyberPower PowerPanel business Use of Hard-coded Passwordcyberpower · powerpanel · CWE-259 | Kritik9,8 | — | %0,5 | 15 May 2024 |
39İzleyin | CVE-2024-33625İstismar yok | CyberPower PowerPanel business Use of Hard-coded Passwordcyberpower · powerpanel · CWE-259 | Kritik9,8 | — | %0,5 | 15 May 2024 |
39İzleyin | CVE-2024-32047İstismar yok | CyberPower PowerPanel business Active Debug Codecyberpower · powerpanel · CWE-489 | Kritik9,8 | — | %0,5 | 15 May 2024 |
39İzleyin | CVE-2023-3264İstismar yok | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internaldataprobe · iboot-pdu4a-c10 firmware · CWE-798 | Kritik9,8 | — | %0,4 | 14 Ağu 2023 |
39İzleyin | CVE-2024-32053İstismar yok | CyberPower PowerPanel business Use of Hard-coded Credentialscyberpower · powerpanel · CWE-798 | Kritik9,8 | — | %0,4 | 15 May 2024 |
36İzleyin | CVE-2023-3267İstismar yok | When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field.cyberpower · powerpanel server · CWE-78 | Yüksek8,8 | — | %1,7 | 14 Ağu 2023 |
35İzleyin | CVE-2023-3260İstismar yok | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parametdataprobe · iboot-pdu4a-c10 firmware · CWE-78 | Yüksek8,8 | — | %1,2 | 14 Ağu 2023 |
35İzleyin | CVE-2024-33615İstismar yok | CyberPower PowerPanel business Relative Path Traversalcyberpower · powerpanel business · CWE-23 | Yüksek8,8 | — | %0,7 | 15 May 2024 |
35İzleyin | CVE-2024-31856İstismar yok | CyberPower PowerPanel business SQL Injectioncyberpower · powerpanel · CWE-89 | Yüksek8,8 | — | %0,5 | 15 May 2024 |
32İzleyin | CVE-2024-32739Kavram kanıtı | CyberPower PowerPanel Enterprise SQL Injectioncyberpower · powerpanel · CWE-89 | Yüksek7,5 | — | %5,4 | 14 May 2024 |
32İzleyin | CVE-2024-32736Kavram kanıtı | CyberPower PowerPanel Enterprise SQL Injectioncyberpower · powerpanel · CWE-89 | Yüksek7,5 | — | %5,4 | 14 May 2024 |
32İzleyin | CVE-2024-32737Kavram kanıtı | CyberPower PowerPanel Enterprise SQL Injectioncyberpower · powerpanel · CWE-89 | Yüksek7,5 | — | %5,4 | 14 May 2024 |
31İzleyin | CVE-2024-32738Kavram kanıtı | CyberPower PowerPanel Enterprise SQL Injectioncyberpower · powerpanel · CWE-89 | Yüksek7,5 | — | %4,5 | 14 May 2024 |
30İzleyin | CVE-2024-32042İstismar yok | CyberPower PowerPanel business Storing Passwords in a Recoverable Formatcyberpower · powerpanel · CWE-257 | Yüksek7,5 | — | %0,3 | 15 May 2024 |
30İzleyin | CVE-2024-31409İstismar yok | CyberPower PowerPanel business Incorrect Authorizationcyberpower · powerpanel · CWE-863 | Yüksek7,5 | — | %0,3 | 15 May 2024 |
28İzleyin | CVE-2023-3261İstismar yok | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 lidataprobe · iboot-pdu4a-c10 firmware · CWE-119 | Yüksek7,2 | — | %0,7 | 14 Ağu 2023 |
26İzleyin | CVE-2024-31410İstismar yok | CyberPower PowerPanel business Use of Hard-coded Cryptographic Keycyberpower · powerpanel · CWE-321 | Orta6,5 | — | %0,2 | 15 May 2024 |
- CVE-2024-3273541Planlayın
CyberPower PowerPanel Enterprise Missing Authentication
KritikCVSS 9,8Kavram kanıtıEPSS %6cyberpower · powerpanel14 May 2024
- CVE-2023-326539İzleyin
An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an at
KritikCVSS 9,8İstismar yokEPSS %1cyberpower · powerpanel server14 Ağu 2023
- CVE-2023-2513239İzleyin
Unrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel Business
KritikCVSS 9,8İstismar yokEPSS %1cyberpower · powerpanel24 Nis 2023
- CVE-2023-2513339İzleyin
Improper privilege management vulnerability in CyberPower PowerPanel Business
KritikCVSS 9,8İstismar yokEPSS %1cyberpower · powerpanel24 Nis 2023
- CVE-2023-2513139İzleyin
Use of default password vulnerability in CyberPower PowerPanel Business
KritikCVSS 9,8İstismar yokEPSS %0cyberpower · powerpanel24 Nis 2023
- CVE-2023-326639İzleyin
A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication check
KritikCVSS 9,8İstismar yokEPSS %0cyberpower · powerpanel server14 Ağu 2023
- CVE-2024-3402539İzleyin
CyberPower PowerPanel business Use of Hard-coded Password
KritikCVSS 9,8İstismar yokEPSS %0cyberpower · powerpanel15 May 2024
- CVE-2024-3362539İzleyin
CyberPower PowerPanel business Use of Hard-coded Password
KritikCVSS 9,8İstismar yokEPSS %0cyberpower · powerpanel15 May 2024
- CVE-2024-3204739İzleyin
CyberPower PowerPanel business Active Debug Code
KritikCVSS 9,8İstismar yokEPSS %0cyberpower · powerpanel15 May 2024
- CVE-2023-326439İzleyin
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal
KritikCVSS 9,8İstismar yokEPSS %0dataprobe · iboot-pdu4a-c10 firmware14 Ağu 2023
- CVE-2024-3205339İzleyin
CyberPower PowerPanel business Use of Hard-coded Credentials
KritikCVSS 9,8İstismar yokEPSS %0cyberpower · powerpanel15 May 2024
- CVE-2023-326736İzleyin
When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field.
YüksekCVSS 8,8İstismar yokEPSS %1cyberpower · powerpanel server14 Ağu 2023
- CVE-2023-326035İzleyin
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL paramet
YüksekCVSS 8,8İstismar yokEPSS %1dataprobe · iboot-pdu4a-c10 firmware14 Ağu 2023
- CVE-2024-3361535İzleyin
CyberPower PowerPanel business Relative Path Traversal
YüksekCVSS 8,8İstismar yokEPSS %0cyberpower · powerpanel business15 May 2024
- CVE-2024-3185635İzleyin
CyberPower PowerPanel business SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %0cyberpower · powerpanel15 May 2024
- CVE-2024-3273932İzleyin
CyberPower PowerPanel Enterprise SQL Injection
YüksekCVSS 7,5Kavram kanıtıEPSS %5cyberpower · powerpanel14 May 2024
- CVE-2024-3273632İzleyin
CyberPower PowerPanel Enterprise SQL Injection
YüksekCVSS 7,5Kavram kanıtıEPSS %5cyberpower · powerpanel14 May 2024
- CVE-2024-3273732İzleyin
CyberPower PowerPanel Enterprise SQL Injection
YüksekCVSS 7,5Kavram kanıtıEPSS %5cyberpower · powerpanel14 May 2024
- CVE-2024-3273831İzleyin
CyberPower PowerPanel Enterprise SQL Injection
YüksekCVSS 7,5Kavram kanıtıEPSS %4cyberpower · powerpanel14 May 2024
- CVE-2024-3204230İzleyin
CyberPower PowerPanel business Storing Passwords in a Recoverable Format
YüksekCVSS 7,5İstismar yokEPSS %0cyberpower · powerpanel15 May 2024
- CVE-2024-3140930İzleyin
CyberPower PowerPanel business Incorrect Authorization
YüksekCVSS 7,5İstismar yokEPSS %0cyberpower · powerpanel15 May 2024
- CVE-2023-326128İzleyin
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 li
YüksekCVSS 7,2İstismar yokEPSS %0dataprobe · iboot-pdu4a-c10 firmware14 Ağu 2023
- CVE-2024-3141026İzleyin
CyberPower PowerPanel business Use of Hard-coded Cryptographic Key
OrtaCVSS 6,5İstismar yokEPSS %0cyberpower · powerpanel15 May 2024