CVE-2023-31310

Improper input validation in Power Management Firmware PMFW may allow an attacker with privileges to send a malformed input for the "set temperature input selection" command, potentially resulting in a loss of integrity and/or availability...

CVE-2023-31307

Improper validation of array index in Power Management Firmware PMFW may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service...

CVE-2023-31310

CVE-2023-31310 concerns improper input validation in Power Management Firmware (PMFW). The known issue involves an attacker with privileges sending a malformed input to the set temperature input selection command, potentially leading to loss of integrity and/or availability. The PT-2024-12271 ent...

CVE-2023-31310

Improper input validation in Power Management Firmware PMFW may allow an attacker with privileges to send a malformed input for the "set temperature input selection" command, potentially resulting in a loss of integrity and/or availability...

CVE-2023-31307

Improper validation of array index in Power Management Firmware PMFW may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service...

CVE-2023-31307

CVE-2023-31307 involves improper validation of an array index in Power Management Firmware (PMFW), allowing a local, privileged attacker to trigger an out-of-bounds memory read and potentially cause a denial of service. The issue is documented across multiple sources, referencing PMFW as the vuln...

CVE-2023-31307

Improper validation of array index in Power Management Firmware PMFW may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service...

CVE-2023-20513

CVE-2023-20513 concerns the Power Management Firmware (PMFW). Multiple sources confirm an insufficient bounds check in PMFW can be exploited by a malicious VF (virtualization function) to send a malformed message, potentially causing a denial of service . The Red Hat/NVD/NVD-derived descriptions ...

CVE-2023-20513

An insufficient bounds check in PMFW Power Management Firmware may allow an attacker to utilize a malicious VF virtualization function to send a malformed message, potentially resulting in a denial of service...

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

...

PT-2024-5630 · Microsoft · Windows Power Dependency Coordinator +1

Name of the Vulnerable Software and Affected Versions: Windows Power Dependency Coordinator affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can allow an attacker to elevate their privileges. A successful exploit may allow for...

PT-2024-12270 · Unknown · Power Management Firmware

Name of the Vulnerable Software and Affected Versions: Power Management Firmware PMFW affected versions not specified Description: The issue is related to improper validation of array index in Power Management Firmware PMFW, which may allow a privileged attacker to cause an out-of-bounds memory...

Voltronic Power ViewPower elevation of privilege vulnerability (CNVD-2025-21587)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower suffers from an elevation of privilege vulnerability that is caused by incorrect permissions being set on a folder. An attacker could use this vulnerability to escalate...

Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-21586)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower suffers from a remote code execution vulnerability that is caused by a lack of proper validation of user-supplied data, which could lead to deserialization of...

Voltronic Power ViewPower Remote Code Execution Vulnerability

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower, which stems from a specific flaw in the MonitorConsole class that can be exploited by an attacker to execute arbitrary...

Kofax Power PDF Memory Misreference Information Disclosure Vulnerability (CNVD-2024-39654)

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from a memory misreference information disclosure vulnerability, which can be exploited by attackers to disclose sensitive information...

Voltronic Power ViewPower Denial of Service Vulnerability

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A denial of service vulnerability exists in Voltronic Power ViewPower, which can be exploited by an attacker to cause a denial of service...

Microsoft Windows Power Dependency Coordinator 资源管理错误漏洞

The Microsoft Windows Power Dependency Coordinator is a component of Windows systems from Microsoft Corporation USA that coordinates power management related operations. A resource management error vulnerability exists in Microsoft Windows Power Dependency Coordinator. An attacker could exploit...

PT-2024-12269 · Unknown · Power Management Firmware

Name of the Vulnerable Software and Affected Versions: Power Management Firmware affected versions not specified Description: The generation of weak and predictable Initialization Vector IV in Power Management Firmware may allow an attacker with privileges to reuse IV values to reverse-engineer...

Voltronic Power ViewPower XML External Entity Injection Vulnerability

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower Pro suffers from an XML external entity injection vulnerability that can be exploited by attackers to disclose sensitive information...