CyberPower PowerPanel Enterprise Authentication Bypass (CVE-2023-3265)

Binary data cyberpowerppecve-2023-3265.nbin...

CVE-2023-3265

An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an attacker to login into the application with the default user "cyberpower" by appending a non-printable character.An unauthenticated attacker can leverage this...

CVE-2023-3265

An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an attacker to login into the application with the default user "cyberpower" by appending a non-printable character.An unauthenticated attacker can leverage this...

CVE-2023-3265

CVE-2023-3265 concerns CyberPower PowerPanel Enterprise DCIM. The flaw is "Improper Neutralization of Escape, Meta, or Control Sequences" due to inadequate sanitization of the username metacharacters, enabling an unauthenticated attacker to log in as an administrator with hardcoded default creden...