Voltronic Power ViewPower 安全漏洞

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A denial of service vulnerability exists in Voltronic Power ViewPower Pro, which is caused due to a lack of authentication before allowing access to functionality. An attacker could exploit the...

Voltronic Power ViewPower 安全漏洞

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. An authentication bypass vulnerability exists in Voltronic Power ViewPower Pro, which can be exploited by an attacker to bypass authentication on the system...

CVE-2023-51572: Improper Neutralization of Special Elements used in an OS Command

Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

Voltronic Power ViewPower Pro

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Voltronic Power Equipment: ViewPower Pro Vulnerabilities: Deserialization of Untrusted Data, Missing Authentication for Critical Function, Exposed Dangerous Method or Function, OS Command...

The vulnerability of the LinuxMonitorConsole software, which is used for controlling power sources in Voltronic Power ViewPower, allows a hacker to execute arbitrary code.

The vulnerability of the LinuxMonitorConsole software for controlling power supply sources from Voltronic Power ViewPower is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created...

Vulnerability of software for managing uninterruptible power sources: Voltronic Power View. Issues related to incorrect default permissions allow attackers to escalate their privileges.

The vulnerability of the software for managing power supply sources in Voltronic Power ViewPower is related to incorrect default permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the MonitorConsole class in the software for controlling power sources of Voltronic Power ViewPower, which allows a intruder to trigger a service failure.

The vulnerability of the MonitorConsole class in the software for managing power sources of Voltronic Power ViewPower is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTTP...

The vulnerability of the SocketService module in the software for managing power sources of Voltronic Power ViewPower Pro allows a intruder to trigger a service failure.

The vulnerability of the SocketService module in the software for managing power sources of Voltronic Power ViewPower Pro is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure through a specially craft...

The vulnerability of the selectDeviceListBy method in the software for controlling power supply sources of Voltronic Power ViewPower allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the selectDeviceListBy method in the software for managing power sources of Voltronic Power ViewPower Pro is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

The vulnerability of the doDocument method in software for managing power sources in Voltronic Power View allows attackers to perform XXE attacks.

The vulnerability of the doDocument method in the software for managing power sources of Voltronic Power ViewPower Pro is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to perform XXE attacks remotely...

The vulnerability of the MySQL software component used for managing power supply sources in Voltronic Power View. This allows a hacker to elevate their privileges to the level of an administrator.

The vulnerability of the MySQL component in the software for managing power sources in Voltronic Power ViewPower Pro lies in the use of rigidly encoded credentials. Exploiting this vulnerability could allow an attacker to elevate their privileges to the level of an administrator...

The vulnerability of the shutdown method in software for controlling power sources of Voltronic Power ViewPower allows a intruder to execute arbitrary code.

The vulnerability of the shutdown method in software for controlling power sources of Voltronic Power View exists because measures to neutralize the special elements used in the operating system are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the shutdown method in software for controlling power sources of Voltronic Power ViewPower allows a perpetrator to execute arbitrary code.

The vulnerability of the shutdown method used in software for controlling Voltronic Power ViewPower is related to the use of a dangerous function or method. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the UpsScheduler class in the software for managing power sources of Voltronic Power ViewPower allows a perpetrator to execute arbitrary code.

The vulnerability of the UpsScheduler class in the software for managing power sources of Voltronic Power ViewPower is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created request...

The vulnerability of the MacMonitorConsole class in the software for controlling power sources of Voltronic Power ViewPower allows a hacker to execute arbitrary code.

The vulnerability of the MacMonitorConsole software class for controlling Voltronic Power ViewPower power sources is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created request...

The vulnerability of the setShutdown method in software for controlling power sources in Voltronic Power ViewPower allows a perpetrator to enhance their privileges.

The vulnerability of the setShutdown method in software for controlling power sources of Voltronic Power ViewPower is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow attackers to enhance their privileges...

The vulnerability of the MonitorConsole class in the software for controlling power sources of Voltronic Power ViewPower allows a perpetrator to execute arbitrary code.

The vulnerability of the MonitorConsole class in the software for controlling power supply sources of Voltronic Power ViewPower is related to the use of dangerous methods or functions. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code through a specially created...

The vulnerability of the `updateManagerPassword` method in the software for managing power supply sources of Voltronic Power ViewPower allows a perpetrator to bypass the authentication process and gain unauthorized access to the software.

The vulnerability of the updateManagerPassword method in the software for managing power supply sources of Voltronic Power ViewPower is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to bypass the authentication...

The vulnerability of the RMI interface in software for controlling power sources in Voltronic Power ViewPower Pro allows a intruder to execute arbitrary code.

The vulnerability of the RMI software interface for controlling power sources in Voltronic Power ViewPower Pro relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially created...

The vulnerability of the updateManagerPassword function in the software for managing power sources of Voltronic Power ViewPower Pro allows a intruder to bypass the authentication process and gain unauthorized access to the software.

The vulnerability of the updateManagerPassword function in the software for managing power sources of Voltronic Power ViewPower Pro is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to bypass the authentication...