Tripp Lite SU750XL UPS Privilege Escalation / Missing Authentication

Tripp Lite SU750XL UPS suffers from multiple privilege escalation issues due to missing authentication. Although these issues were previously found on PDUs back in 2019, it appears the UPSes are also affected. Author: Lucas Lalumiere Contact: [email protected] Date: 2025-3-17 Vendor: Tripp Li...

CVE-2019-16261

CVE-2019-16261 affects Tripp Lite PDUMH15AT (firmware 12.04.0053) and SU750XL (firmware 12.04.0052). Affected devices allow unauthenticated POST requests to the /Forms/ directory, enabling actions such as changing the manager/admin passwords or shutting off power to an outlet. The vendor notes a ...