Lucene search

ZUSO ARTCVELIST:CVE-2023-25133

HistoryApr 24, 2023 - 12:00 a.m.

CVE-2023-25133 Improper privilege management vulnerability in CyberPower PowerPanel Business

2023-04-2400:00:00

CWE-269

ZUSO ART

www.cve.org

cyberpower

powerpanel

privilege management

vulnerability

default.cmd file

remote attackers

windows

linux

macos

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%

JSON

Improper privilege management vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 64bit v4.8.6 and earlier, PowerPanel Business Management for Linux 32bit v4.8.6 and earlier, PowerPanel Business Management for Linux 64bit v4.8.6 and earlier, PowerPanel Business Local/Remote for MacOS v4.8.6 and earlier, and PowerPanel Business Management for MacOS v4.8.6 and earlier allows remote attackers to execute operation system commands via unspecified vectors.

CNA Affected

[
  {
    "vendor": "CyberPower",
    "product": "PowerPanel Business Local / Remote",
    "versions": [
      {
        "version": "unspecified",
        "lessThanOrEqual": "v4.8.6",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Windows, MacOS, Linux"
    ]
  },
  {
    "vendor": "CyberPower",
    "product": "PowerPanel Business Management",
    "versions": [
      {
        "version": "unspecified",
        "lessThanOrEqual": "v4.8.6",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Windows, MacOS, Linux"
    ]
  }
]

References

www.cyberpower.com/global/en/product/sku/powerpanel_business_for_linux#downloads

www.cyberpower.com/global/en/product/sku/powerpanel_business_for_mac#downloads

www.cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine#downloads

www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads

zuso.ai/Advisory/

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%

JSON

Related for CVELIST:CVE-2023-25133