Lucene search

K
zdiSimon Janz (@esj4y)ZDI-23-1877
HistoryDec 20, 2023 - 12:00 a.m.

(0Day) Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability

2023-12-2000:00:00
Simon Janz (@esj4y)
www.zerodayinitiative.com
6
vulnerability
remote attackers
denial-of-service
voltronic power viewpower pro
socketservice
udp port 41222
authentication

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.0%

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SocketService module, which listens on UDP port 41222 by default. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.0%

Related for ZDI-23-1877