CY
Vendor
CyberPower
50
CVEs
0
On KEV
0
New 30D
Products
PO9.8
Powerpanel
Cyberpower
16 CVEs0 on KEV0 new
PB9.8
PowerPanel business
CyberPower
9 CVEs0 on KEV0 new
PE9.8
PowerPanel Enterprise
CyberPower
8 CVEs0 on KEV0 new
PS9.8
Powerpanel Server
Cyberpower
6 CVEs0 on KEV0 new
CP9.8
CyberPower PowerPanel Enterprise
CyberPower
5 CVEs0 on KEV0 new
PB9.8
PowerPanel Business Local / Remote
CyberPower
3 CVEs0 on KEV0 new
PB9.8
PowerPanel Business Management
CyberPower
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-31409 | PB PowerPanel business CyberPower | 7.5 | May 15 | CyberPower PowerPanel business Incorrect Authorization |
| CVE-2024-31410 | PB PowerPanel business CyberPower | 6.5 | May 15 | CyberPower PowerPanel business Use of Hard-coded Cryptographic Key |
| CVE-2024-31856 | PB PowerPanel business CyberPower | 8.8 | May 15 | CyberPower PowerPanel business SQL Injection |
| CVE-2024-32042 | PB PowerPanel business CyberPower | 7.5 | May 15 | CyberPower PowerPanel business Storing Passwords in a Recoverable Format |
| CVE-2024-32047 | PB PowerPanel business CyberPower | 9.8 | May 15 | CyberPower PowerPanel business Active Debug Code |
| CVE-2024-32053 | PB PowerPanel business CyberPower | 9.8 | May 15 | CyberPower PowerPanel business Use of Hard-coded Credentials |
| CVE-2024-33615 | PB PowerPanel business CyberPower | 8.8 | May 15 | CyberPower PowerPanel business Relative Path Traversal |
| CVE-2024-33625 | PB PowerPanel business CyberPower | 9.8 | May 15 | CyberPower PowerPanel business Use of Hard-coded Password |
| CVE-2024-34025 | PB PowerPanel business CyberPower | 9.8 | May 15 | CyberPower PowerPanel business Use of Hard-coded Password |
| CVE-2024-32739 | CP CyberPower PowerPanel Enterprise CyberPower | 7.5 | May 9 | CyberPower PowerPanel Enterprise SQL Injection |
| CVE-2024-32738 | CP CyberPower PowerPanel Enterprise CyberPower | 7.5 | May 9 | CyberPower PowerPanel Enterprise SQL Injection |
| CVE-2024-32737 | CP CyberPower PowerPanel Enterprise CyberPower | 7.5 | May 9 | CyberPower PowerPanel Enterprise SQL Injection |
| CVE-2024-32736 | CP CyberPower PowerPanel Enterprise CyberPower | 7.5 | May 9 | CyberPower PowerPanel Enterprise SQL Injection |
| CVE-2024-32735 | CP CyberPower PowerPanel Enterprise CyberPower | 9.8 | May 9 | CyberPower PowerPanel Enterprise Missing Authentication |
| CVE-2023-3267 | PE PowerPanel Enterprise CyberPower | 8.8 | Aug 14 | When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field |
| CVE-2023-3266 | PE PowerPanel Enterprise CyberPower | 9.8 | Aug 14 | A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentication is selected.An… |
| CVE-2023-3265 | PE PowerPanel Enterprise CyberPower | 9.8 | Aug 14 | An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an attacker to login into the application… |
| CVE-2023-3264 | PS Powerpanel Server Cyberpower | 9.8 | Aug 14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent… |
| CVE-2023-3261 | PS Powerpanel Server Cyberpower | 7.2 | Aug 14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could… |
| CVE-2023-3260 | PS Powerpanel Server Cyberpower | 8.8 | Aug 14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter |
| CVE-2023-25132 | PB PowerPanel Business Local / Remote CyberPower | 9.8 | Apr 24 | Unrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel Business |
| CVE-2023-25133 | PB PowerPanel Business Local / Remote CyberPower | 9.8 | Apr 24 | Improper privilege management vulnerability in CyberPower PowerPanel Business |
| CVE-2023-25131 | PB PowerPanel Business Local / Remote CyberPower | 9.8 | Apr 24 | Use of default password vulnerability in CyberPower PowerPanel Business |