Voltronic Power ViewPower 安全漏洞

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower Pro, which is caused by failing to properly validate a user-supplied string before executing a system call with it. An...

Voltronic Power ViewPower 安全漏洞

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. An authentication bypass vulnerability exists in Voltronic Power ViewPower Pro, which can be exploited by an attacker to bypass authentication on the system...

CVE-2023-51572: Improper Neutralization of Special Elements used in an OS Command

Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

Voltronic Power ViewPower Pro

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Voltronic Power Equipment: ViewPower Pro Vulnerabilities: Deserialization of Untrusted Data, Missing Authentication for Critical Function, Exposed Dangerous Method or Function, OS Command...

The vulnerability of the RMI software interface for controlling power sources in Voltronic Power View allows a perpetrator to execute arbitrary code.

The vulnerability of the RMI software interface for controlling power sources in Voltronic Power ViewPower is related to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially created...

The vulnerability of the shutdown method in software for controlling power sources of Voltronic Power ViewPower allows a perpetrator to execute arbitrary code.

The vulnerability of the shutdown method used in software for controlling Voltronic Power ViewPower is related to the use of a dangerous function or method. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the UpLoadAction class in the software for managing power sources of Voltronic Power ViewPower allows a perpetrator to execute arbitrary code and gain full control over the system.

The vulnerability of the UpLoadAction class in the software for managing power sources of Voltronic Power ViewPower Pro relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code and gain full control over the...

Vulnerability of software for managing uninterruptible power sources: Voltronic Power View. Issues related to incorrect default permissions allow attackers to escalate their privileges.

The vulnerability of the software for managing power supply sources in Voltronic Power ViewPower is related to incorrect default permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the MonitorConsole class in the software for controlling power sources of Voltronic Power ViewPower, which allows a intruder to trigger a service failure.

The vulnerability of the MonitorConsole class in the software for managing power sources of Voltronic Power ViewPower is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTTP...

The vulnerability of the setShutdown method in software for controlling power sources in Voltronic Power ViewPower allows a perpetrator to enhance their privileges.

The vulnerability of the setShutdown method in software for controlling power sources of Voltronic Power ViewPower is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow attackers to enhance their privileges...

The vulnerability of the getMacAddressByIP function in the software for controlling power sources of Voltronic Power ViewPower Pro allows a hacker to execute arbitrary code.

The vulnerability of the “getMacAddressByIP” function in the software for controlling power sources of Voltronic Power ViewPower Pro is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a malicious actor, operating remotely, to...

The vulnerability of the selectDeviceListBy method in the software for controlling power supply sources of Voltronic Power ViewPower allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the selectDeviceListBy method in the software for managing power sources of Voltronic Power ViewPower Pro is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

The vulnerability of the getModBusPassword method in the software for controlling power supply sources of Voltronic Power ViewPower allows a intruder to gain unauthorized access to protected information.

The vulnerability of the “getModBusPassword” method in the software for controlling power supply sources of Voltronic Power ViewPower Pro is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acce...

The vulnerability of the Struts2 software component for managing power supply sources in Voltronic Power View allows a perpetrator to execute arbitrary code.

The vulnerability of the Struts2 component in the software for managing power sources of Voltronic Power ViewPower Pro is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the doDocument method in software for managing power sources in Voltronic Power View allows attackers to perform XXE attacks.

The vulnerability of the doDocument method in the software for managing power sources of Voltronic Power ViewPower Pro is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to perform XXE attacks remotely...

The vulnerability of the selectEventConfig method in the software for managing power sources of Voltronic Power ViewPower Pro allows a hacker to execute arbitrary SQL code.

The vulnerability of the selectEventConfig method in the software for managing power supply sources of Voltronic Power ViewPower Pro relates to the lack of measures taken to protect the SQL query structure when data cleaning is insufficient. Exploiting this vulnerability could allow an attacker...

The vulnerability of the shutdown method in software for controlling power sources of Voltronic Power ViewPower allows a intruder to execute arbitrary code.

The vulnerability of the shutdown method in software for controlling power sources of Voltronic Power View exists because measures to neutralize the special elements used in the operating system are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the UpsScheduler class in the software for managing power sources of Voltronic Power ViewPower allows a perpetrator to execute arbitrary code.

The vulnerability of the UpsScheduler class in the software for managing power sources of Voltronic Power ViewPower is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created request...

The vulnerability of the LinuxMonitorConsole software, which is used for controlling power sources in Voltronic Power ViewPower, allows a hacker to execute arbitrary code.

The vulnerability of the LinuxMonitorConsole software for controlling power supply sources from Voltronic Power ViewPower is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created...

The vulnerability of the MacMonitorConsole class in the software for controlling power sources of Voltronic Power ViewPower allows a hacker to execute arbitrary code.

The vulnerability of the MacMonitorConsole software class for controlling Voltronic Power ViewPower power sources is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created request...