(0Day) Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability. The specific flaw exists within the updateManagerPassword method. The issue results from the exposure of a...

(0Day) Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MacMonitorConsole class. The issue results from an exposed dangerous metho...

PT-2023-8173 · Voltronic Power · Voltronic Power Viewpower

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower affected versions not specified Description: The issue is related to the getModbusPassword method and is caused by insufficient protection of service data. This allows remote attackers to disclose sensitive informati...

PT-2023-8150 · Voltronic Power · Voltronic Power Viewpower

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this issue...

PT-2023-8172 · Voltronic Power · Voltronic Power Viewpower

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower Pro affected versions not specified Description: The issue is related to the selectEventConfig method in Voltronic Power ViewPower Pro, which lacks proper validation of user-supplied strings used to construct SQL...

PT-2023-8174 · Voltronic Power · Voltronic Power Viewpower

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. The flaw exists within the shutdown method due to the lack of proper validation of ...

CVE-2021-30490

upsMonitor in ViewPower aka ViewPowerHTML 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation...

CVE-2021-30490

upsMonitor in ViewPower aka ViewPowerHTML 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation...

CVE-2021-30490

upsMonitor in ViewPower aka ViewPowerHTML 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation...

Privilege escalation

upsMonitor in ViewPower aka ViewPowerHTML 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation...

CVE-2021-30490

upsMonitor in ViewPower aka ViewPowerHTML 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation...

CVE-2021-30490

The CVE-2021-30490 entry concerns upsMonitor in ViewPower (ViewPowerHTML) with versions 1.04-21012 through 1.04-21353. The root cause is insecure permissions on the service binary, which can enable an Authenticated User to modify files and perform privilege escalation. Publicly documented details...

ViewPower 安全漏洞

ViewPower is an advanced UPS management software from ViewPower. A security vulnerability exists in ViewPower upsMonitor versions 1.04-21012 through 1.04-21353, which arises from having insecure permissions to a binary service file, allowing an authenticated user to modify the file to allow...

PT-2022-10017 · Viewpower · Upsmonitor

Name of the Vulnerable Software and Affected Versions: upsMonitor in ViewPower aka ViewPowerHTML versions 1.04-21012 through 1.04-21353 Description: The issue is related to insecure permissions for the service binary, allowing an authenticated user to modify files and enabling privilege escalatio...

CVE-2021-30490: Incorrect Default Permissions

upsMonitor in ViewPower aka ViewPowerHTML 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation...