Lucene search
K

226 matches found

ATTACKERKB
ATTACKERKB
added 2024/04/01 10:15 p.m.1 views

CVE-2023-51571

Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this...

7.5CVSS5.9AI score0.00551EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2024/04/01 10:15 p.m.2 views

CVE-2023-51570

Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS6.3AI score0.04618EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/04/01 10:15 p.m.1 views

CVE-2023-51570

Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS7.8AI score0.04618EPSS
Exploits0References1
NVD
NVD
added 2024/04/01 10:15 p.m.7 views

CVE-2023-51570

Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS9.9AI score0.04618EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/01 9:18 p.m.11 views

CVE-2023-51573 Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability

Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this...

9.8CVSS9.8AI score0.00394EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/01 9:18 p.m.17 views

CVE-2023-51573 Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability

Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this...

9.8CVSS6.9AI score0.00394EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/01 9:18 p.m.19 views

CVE-2023-51572 Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability

Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS10AI score0.30347EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/01 9:18 p.m.16 views

CVE-2023-51572 Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability

Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS8.1AI score0.30347EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/01 9:17 p.m.19 views

CVE-2023-51571 Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability

Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this...

7.5CVSS7.8AI score0.00551EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/01 9:17 p.m.9 views

CVE-2023-51571 Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability

Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this...

7.5CVSS6.8AI score0.00551EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/01 9:14 p.m.18 views

CVE-2023-51570 Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability

Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS8AI score0.04618EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/04/01 12:0 a.m.2 views

Voltronic Power ViewPower 安全漏洞

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A denial of service vulnerability exists in Voltronic Power ViewPower Pro, which is caused due to a lack of authentication before allowing access to functionality. An attacker could exploit the...

7.5CVSS6.8AI score0.00551EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/04/01 12:0 a.m.3 views

Voltronic Power ViewPower 安全漏洞

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower Pro, which is caused by failing to properly validate a user-supplied string before executing a system call with it. An...

9.8CVSS8.1AI score0.30347EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/04/01 12:0 a.m.2 views

Voltronic Power ViewPower 安全漏洞

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. An authentication bypass vulnerability exists in Voltronic Power ViewPower Pro, which can be exploited by an attacker to bypass authentication on the system...

9.8CVSS7AI score0.00394EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/04/01 12:0 a.m.3 views

Voltronic Power ViewPower 安全漏洞

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower Pro, which is caused by a lack of proper validation of user-supplied data and can lead to deserialization of untrustwort...

9.8CVSS8.2AI score0.04618EPSS
Exploits0References2
ICS
ICS
added 2024/01/23 7:0 a.m.36 views

Voltronic Power ViewPower Pro

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Voltronic Power Equipment: ViewPower Pro Vulnerabilities: Deserialization of Untrusted Data, Missing Authentication for Critical Function, Exposed Dangerous Method or Function, OS Command...

9.8CVSS9.9AI score0.30347EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:0 a.m.1 views

The vulnerability of the UpsScheduler class in the software for managing power sources of Voltronic Power ViewPower allows a perpetrator to execute arbitrary code.

The vulnerability of the UpsScheduler class in the software for managing power sources of Voltronic Power ViewPower is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created request...

10CVSS8.2AI score0.02576EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:0 a.m.1 views

The vulnerability of the getMacAddressByIP function in the software for controlling power sources of Voltronic Power ViewPower Pro allows a hacker to execute arbitrary code.

The vulnerability of the “getMacAddressByIP” function in the software for controlling power sources of Voltronic Power ViewPower Pro is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a malicious actor, operating remotely, to...

10CVSS8.2AI score0.30347EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:0 a.m.1 views

The vulnerability of the setShutdown method in software for controlling power sources in Voltronic Power ViewPower allows a perpetrator to enhance their privileges.

The vulnerability of the setShutdown method in software for controlling power sources of Voltronic Power ViewPower is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.0007EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:0 a.m.1 views

The vulnerability of the MonitorConsole class in the software for controlling power sources of Voltronic Power ViewPower allows a perpetrator to execute arbitrary code.

The vulnerability of the MonitorConsole class in the software for controlling power supply sources of Voltronic Power ViewPower is related to the use of dangerous methods or functions. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code through a specially created...

10CVSS8.2AI score0.06077EPSS
Exploits0References4
Rows per page
Query Builder